Forum Discussion

Altocumulus

Jun 29, 2022

web proxy load balancing

We have two web proxy's that we would like to load balance with our F5, how should this look in terms of options for persistence profiles and anything else that would need configuring please?

application delivery

cymru81

Altocumulus

thanks for the reply, its an LTM not SWG we're using if that makes a difference?
my misunderstanding too, assumed persistence profile were related to pool members not the actual active standby f5 boxes?
will review docs but thank you again

nikolay_dimitrov

Employee

Jun 30, 2022

Still for web proxy traffic it depends if F5 decrypts the traffic as if it does not then cookie persistance is not an option and the web proxy may remove it so it does not work so great with proxy devices. You can play with using SSL persistanse as the traffic now is HTTPS and there is almost no HTTP and as a backup persistance method source address or destination address but as I mentioned that depends on your web proxy devices. If you use wildcard F5 Virtual server as one article for the cisco proxy I shared the destination address persistance will be the best as the web cache servers link I shared below. If there is NAT or other proxy device before the f5 device then don't even consider source address. Better check the guides first.

Using SSL session ID persistence (f5.com)

https://support.f5.com/csp/article/K25523645

Exactly how Destination Address Affinity persisten... - DevCentral (f5.com)

Source address persistence supersedes cookie persistence (f5.com)