Forum Discussion

bmcdarby_236629's avatar
bmcdarby_236629
Icon for Nimbostratus rankNimbostratus
Dec 04, 2015

Reverse Proxy setup question

I've tried both the directions for setting up a ReverseProxy and using ProxyPass listed on this site. I have done a comparison to a lot of folks that have asked questions when they had problems.

 

Our problem is relatively simple, we need to take a URL and then reverse proxy it to a ... the critical piece of this is to http to https... due to the way our internal applications work it has to be http client url to an https server url (due to how empowerID works it is https) only.

 

Any suggestions on how what I may be doing wrong? Right now it doesn't not seem to get to the server we want to it reverse proxy to ... it times out or gives a data not received message.

 

I've tried the instructions below for setting up a reverse proxy, we are running the 11.6 of the BigIP F5.

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-4-0/21.html https://devcentral.f5.com/codeshare/proxypass-v10-v11

 

BIG-IP
devops

4 Replies

Sort By
  • Brad_Parker_139's avatar
    Brad_Parker_139
    Icon for Nacreous rankNacreous
    Dec 11, 2015

    What you want to do is to setup you virtual server on port 80 with a server SSL profile, your pool members on port 443, a HTTP profile, and a rewrite profile. Then you can use an iRule like this to handle rewriting the https links to http back to the client.

    when HTTP_REQUEST {
    HTTP::header insert "SetContextURI" "https://[HTTP::host][HTTP::path]"
    HTTP::path [string map {/123/ /321/} [HTTP::path]]
     Disable the stream filter for all requests
    STREAM::disable
     LTM does not uncompress response content, so if the server has compression enabled
     and it cannot be disabled on the server, we can prevent the server from 
     sending a compressed response by removing the compression offerings from the client
    HTTP::header remove "Accept-Encoding"
}
when HTTP_RESPONSE {
     Replace http:// with https://
    STREAM::expression {@/321/@/123/@}

     Enable the stream filter for this response only
    STREAM::enable
}
    • Hajar's avatar
      Hajar
      Icon for Nimbostratus rankNimbostratus
      Apr 06, 2016
      Hello, I am running version 11.6.0. Today I tried ProxyPass iRule solution provided in https://devcentral.f5.com/codeshare/proxypass-v10-v11. 1- I created a VS called test. 2- I created Data group called ProxyPasstest. for now only entry of string= test.com value= cloud-test.com 3- I cerated irule called ProxyPass and copied entire code without any change, then applied the irule to the VS, test. I was hoping this will point users requesting test.com to cloud-test site but will keep the URL as test.com. I guess I am doing something wrong. It doesn't get to cloud-test at all. I get page not found error. I can go to cloud-test.com if I have irule redirect, but this is not we want since it changes the URL to cloud-test. Any idea what I have done incorrectly with ProxyPass iRule?
  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Dec 11, 2015

    What you want to do is to setup you virtual server on port 80 with a server SSL profile, your pool members on port 443, a HTTP profile, and a rewrite profile. Then you can use an iRule like this to handle rewriting the https links to http back to the client.

    when HTTP_REQUEST {
    HTTP::header insert "SetContextURI" "https://[HTTP::host][HTTP::path]"
    HTTP::path [string map {/123/ /321/} [HTTP::path]]
     Disable the stream filter for all requests
    STREAM::disable
     LTM does not uncompress response content, so if the server has compression enabled
     and it cannot be disabled on the server, we can prevent the server from 
     sending a compressed response by removing the compression offerings from the client
    HTTP::header remove "Accept-Encoding"
}
when HTTP_RESPONSE {
     Replace http:// with https://
    STREAM::expression {@/321/@/123/@}

     Enable the stream filter for this response only
    STREAM::enable
}
    • Hajar's avatar
      Hajar
      Icon for Nimbostratus rankNimbostratus
      Apr 06, 2016
      Hello, I am running version 11.6.0. Today I tried ProxyPass iRule solution provided in https://devcentral.f5.com/codeshare/proxypass-v10-v11. 1- I created a VS called test. 2- I created Data group called ProxyPasstest. for now only entry of string= test.com value= cloud-test.com 3- I cerated irule called ProxyPass and copied entire code without any change, then applied the irule to the VS, test. I was hoping this will point users requesting test.com to cloud-test site but will keep the URL as test.com. I guess I am doing something wrong. It doesn't get to cloud-test at all. I get page not found error. I can go to cloud-test.com if I have irule redirect, but this is not we want since it changes the URL to cloud-test. Any idea what I have done incorrectly with ProxyPass iRule?