F5 Sites
  • F5.com
  • LearnF5
  • NGINX
  • MyF5
  • Partner Central
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
Groups
EventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. CrowdSRC
  3. CodeShare

Use F5 LTM as HTTP Proxy

Problem this snippet solves: LTM product can be used as a HTTP Proxy for servers and PC. This code explains minimum requirements to configure proxy feature without SWG module (configurations from...
Updated Jun 06, 2023
Version 2.0
application delivery
bash
explicit forward proxy
LTM
openssl
TMOS
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Joined January 04, 2011
View Profile
Nicol4s's avatar
Nicol4s
Icon for Nimbostratus rankNimbostratus
Nov 20, 2019

Hello,

Yeah I did find a solution.

 

Please do not forget to enable the Advanced view in the Virtual Server configuration mode !

 

First, create a new Tunnel interface ( this is in the VLAN menu of the BIG-IP ) :

Name : MyTunnelInterface ( choose whatever you want )

Profile : tcp-forward

 

Then, you have to configure 2 virtual servers :

  • One VS (type Standard) is listening on TCP/8080 and ENABLED ON THE INTERFACE WHERE CLIENTS ARE COMING FROM

Important settings on this VS :

SNAT : Automap

HTTP Profile : http-explicit

 

  • Another VS is of type "Forwarding IP" and has the following config :

Source : 0.0.0.0/0

Destination : 0.0.0.0/0

Service port : All ports

Enabled on : MyTunnelInterface ( This is very important, use the name you have chosen earlier in this guide )

Protocol : TCP ( This prevents any kind of performance penalty )

Profile : FastL4 with loose initiation and loose close enabled ( I created a new profile from the existing default FastL4 profile )

SNAT : Automap mode

 

And voila, you should be good to go.

 

This is working on the following cluster :

2x BIG IP w/ BEST bundle in HA Active / Passive mode

 

I hope this guide will somewhat help you.

 

Regards.

 

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesF5 CertificationLearnF5 Training

SUPPORT

Manage SubscriptionsProfessional ServicesProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

F5 logo©2024 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information