Forum Discussion

tomcat_93289's avatar
tomcat_93289
Icon for Nimbostratus rankNimbostratus
Dec 04, 2007

Using F5 as a Proxy

Forgive my ignorance as I am pretty unfamiliar with the technoligies available in the BigIP appliances.

 

 

I'm looking at by passing my proxy for applications that it TCP-tunnels.

 

 

From what I can see the f5 is a session proxy, therefore sessions are terminated on the f5 and rebuilt from the f5 to the destination.

 

 

For example, I want to allow specif range of IP address to talk to citrix-ica (Port: TCP 1494) outsite.

 

 

Could I know if any one has done this before, if yes then I need to know what should do step by step. Thanks in advance

 

 

config
design
  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    Dec 19, 2007
    Hi tomcat --

     

     

    Do you want to load balance the traffic, or just forward the flow between client & server?

     

     

    /deb
  • Vaikunt_95643's avatar
    Vaikunt_95643
    Icon for Nimbostratus rankNimbostratus
    Jan 28, 2008
    I have a simillar requirement too.. I am looking to configure BigIP as a Proxy to allow all servers within our network to go through the BigiP to connect to the Internet.....I havent' figured out how to do it.

     

     

    Regards,

     

    Vaikunt
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Jan 28, 2008
    Perhaps the documentation falls short here, because whereas the information is present, this seems to be a universal problem with understanding how the product works. The BigIP in version 4 had a checkbox where you could enable ip forwarding globally. In version 9, the box is essentially default deny, and any forwarding needs to be configured via a virtual server. This can be done specifically to meet a need, or you can configure a route-all virtual server:

    
virtual forward-all {
   ip forward
   destination any:any
   mask none
}

    This will forward all traffic as long as there is a matching route in the routing table.