Forum Discussion

riteshp_214568's avatar
riteshp_214568
Icon for Nimbostratus rankNimbostratus
Nov 19, 2015

Proxypass functionality in f5 (11.2.1 hf13)

Hi,

 

First time posting a question - hoping someone can help.

 

Objective: somehow intercept one of siteminder added headers and based on value of the header, proxypass the rest of the requests to appropriate servers.

 

working example: user requests abc.com/def -> f5 -> reverse proxy -> siteminder does it thing (including adding additional headers) -> apache reverse proxy sends /def to xyz.com/def -> xyz is a f5 vs -> f5 sends to appropriate pool member. This is repeated for other url's, where abc.com/ghi will be serviced by 123.com/ghi

 

Objective example: user requests abc.com/def -> f5 -> reverse proxy -> siteminder does it thing (including adding additional headers) -> somehow inspect the additional siteminder added headers and based on the value proxy all communication to certain servers (f5 vs's). As an example, user requests abc.com/def -> f5 -> reverse proxy -> siteminder does it thing (including adding additional headers) -> if http_header aaa = bbb then proxy /def to xyz.com/def or if http_header aaa = ccc then proxy /def to 1234.com/def, etc...

 

so far: Was able to capture the siteminder headers while the request was forwarded from the proxy server to f5. But unable to proxy this request. As an example, user requests abc.com/def -> f5 -> reverse proxy -> siteminder does it thing (including adding additional headers) -> apache reverse proxy sends /def to xyz.com/def -> xyz is a f5 vs -> able to capture the siteminder header here (shows up as part of http_request) -> how to proxy it from here?

 

Tried Proxypass but it doesn't work - may be i am doing something wrong?

 

Thanks

 

1 Reply

  • The classes are defined much differently in 11.4 - so more or less some development needs to be made within the iRule for ProxyPass. Take a look when calling SNAT class as it is redefined.