Forum Discussion

sergio_baza_alo's avatar
sergio_baza_alo
Icon for Altocumulus rankAltocumulus
Nov 19, 2017
Solved

Use F5 APM as Forward Proxy

Hello All, I have one BIG-IP with APM license and I wan to use it as a forward proxy. I have used this iApp https://devcentral.f5.com/codeshare/apm-explicit-proxy and now I have: DNS Resolver...
application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)
security
  • sergio_baza_alo's avatar
    sergio_baza_alo
    Nov 27, 2017

    I finally managed to solve my problem, I’m going to explain how to just in case somebody needs it.

     

    First I used the iApp which:

     

    • creates dns resolver
    • creates tunnel with tcp-forward option
    • creates http profile for explicit-proxy
    • creates vs to be used as the proxy

    After that I created a new one vs listening on 0.0.0.0:443 and only enabled on the tunnel that was created by te iApp. This is a fast L4 forwarding proxy as I don’t want to inspect ssl traffic.

     

    All the SNAT settings was setted to Automap.

     

sergio_baza_alo's avatar
sergio_baza_alo
Icon for Altocumulus rankAltocumulus
Nov 27, 2017

I finally managed to solve my problem, I’m going to explain how to just in case somebody needs it.

 

First I used the iApp which:

 

  • creates dns resolver
  • creates tunnel with tcp-forward option
  • creates http profile for explicit-proxy
  • creates vs to be used as the proxy

After that I created a new one vs listening on 0.0.0.0:443 and only enabled on the tunnel that was created by te iApp. This is a fast L4 forwarding proxy as I don’t want to inspect ssl traffic.

 

All the SNAT settings was setted to Automap.