HTTP Explicit Proxy - V11.5+

Problem this snippet solves:

This iApp configures an Explicit Proxy using the new "Explicit" Proxy Mode that was introduced into the HTTP Profile in BIG-IP 11.5.

You only need LTM or APM provisioned.

It creates all configuration components required including:

  • DNS Resolvers
  • TCP Tunnel
  • HTTP Profile (Explicit)
  • Default Connect Handling set to Allow
  • SNAT Pools (Optional)
  • SNAT Default is Automap

If you require the Explicit Proxy to listen on more than 1 port e.g 3128 and 8080, simply just create another Application Service.

Contributed by: Brett Smith

How to use this snippet:


Published Mar 11, 2015
Version 1.0
explicit
forward proxy
iapp
iApps
LTM
security
  • xunil321_122934's avatar
    xunil321_122934
    Icon for Nimbostratus rankNimbostratus
    Jul 08, 2016

    Eric, we are also interested in implementing some sort of user authentication.

     

    Did you had success with your Auth?

     

  • Eric_Marquez_25's avatar
    Eric_Marquez_25
    Icon for Nimbostratus rankNimbostratus
    Apr 27, 2016
    Brett, does this support proxy auth. I'm doing some testing and I would like to use my Virtual F5 as a forwarding proxy with Auth. The auth can be a single username/pass. is it possible to get this added to it?
  • Jos_Baanders_17's avatar
    Jos_Baanders_17
    Icon for Nimbostratus rankNimbostratus
    Apr 20, 2016
    Thanks for sharing this, how best could we filter URL's, have a whitelist of permitted sites and block all others?