cancel
Showing results for 
Search instead for 
Did you mean: 

Need help - Configure forwarding proxy chain

cakriwut
Nimbostratus
Nimbostratus

Hi team,

 

Initially I have configured forward proxy without any issue:

Client (Intranet) -> F5 (explicit-http) -> INTERNET

 

Now, we want to put proxy pool between F5 and INTERNET like this:

Client (Intranet) -> F5 (explicit-http) -> HTTP Proxy Pool -> INTERNET

 

I tried to follow this article - https://devcentral.f5.com/s/articles/configure-the-f5-big-ip-as-an-explicit-forward-web-proxy-using-... , however F5 (explicit-http) doesn't seem to tunnel the traffic to the HTTP Proxy Pool.

 

Please guide me what is missing?

 

Thanks,

 

Riwut

1 ACCEPTED SOLUTION

nathe
Cirrocumulus
Cirrocumulus

Have you seen this iApp? May identify any misconfiguration. Of course you may not need to go down the route of 0365 bypass though.

View solution in original post

3 REPLIES 3

nathe
Cirrocumulus
Cirrocumulus

Have you seen this iApp? May identify any misconfiguration. Of course you may not need to go down the route of 0365 bypass though.

cakriwut
Nimbostratus
Nimbostratus

  thanks, you are saving my day.

For others who has same difficulties, here are the key moving part to create load balance forward proxy chain.

  1. Create Pool of forward proxy, that will actually connect to internet.
  2. Create DNS Resolver
  3. Create tcp-forward tunnel
  4. Create http-explicit service profile (bind DNS resolver, tcp-forward tunnel, disable one connect transformation, enable default connect handling)
  5. Create iRule that will disable HTTP::proxy , and direct to Pool of forward proxy.

 

Apparently my initial configuration was missing step-4 (disable one connect transformation) and step-5 irule.

Hence the principle to achieve forward proxy chain are:

  1. Create http-explicit VS for the proxy endpoint
  2. Using iRule to internally change the processing into Reverse proxy.

 

Thanks,

 

Riwut

 

 

 - might you consider selecting the answer that  provided as best? You could select your own as well if you prefer. Cheers.