Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

monitor web proxy

Hi,

I am currently monitoring 2 web proxys using LTM using tcp/8080.
Best would be to http get www.hp.com for instance using individual proxy ips and associated NTLM credentials from LTM.
Do you know how can I achieve that?

Thanks for your contribution.
Stephane
1
Rate this Question
Comments on this Question
Comment made 23-Jan-2017 by Pinko_Commie 66

I spent a long time trying to work out why the standard HTTP monitors didn't work for this.

It is because the HTTP monitor relies on receiving a "401 Authenticate" message from the initial BASIC auth request to kick in the NTLM negotiation.

Because proxies respond with a "407 Proxy Authenticate" instead of a 401, the monitor doesn't work.

So I wrote the following external monitor: https://devcentral.f5.com/codeshare/ntlm-authenticated-proxy-external-monitor-1013

0

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Hi Stephane,

You could configure a standard HTTP monitor to send a single HTTP request to the pool members. If the server response contains the receive string, it will be marked up in the pool.

I believe that NTLM authentication requires multiple request/response loops so I don't think you could use NTLM with a standard HTTP monitor. Here is a related post (Click here).

Does the proxy support any other authentication methods? If so, you could configure an HTTP monitor to do this health checking. You can get example monitor send strings in the LTM config guide for your version (Click here), in the Monitoring forum (Click here) or in the Monitoring Codeshare (Click here).

Aaron
0