Forum Discussion

f5beginner's avatar
f5beginner
Icon for Cirrostratus rankCirrostratus
Jul 11, 2019

F5 as a Proxy

Hello All, I have one simple question, what is needed to set up F5 as a full proxy. I suposed it is done by setting basic settings of virtual server or is there something what is needed to set up ?

 

Thank you

BIG-IP
security

8 Replies

Sort By
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jul 11, 2019

    to configure LTM as a HTTP proxy, look at this article

     

    https://devcentral.f5.com/s/articles/use-f5-ltm-as-http-proxy-1145

  • f5beginner's avatar
    f5beginner
    Icon for Cirrostratus rankCirrostratus
    Jul 12, 2019

    Hi Stanislas,

     

    problem is, that I do not have SSL, Forward Proxy license.

     

    Thank you

    • Stanislas_Piro2's avatar
      Stanislas_Piro2
      Icon for Cumulonimbus rankCumulonimbus
      Jul 12, 2019

      as you can see in the article I wrote, you can use proxy without SSL, Forward Proxy license... in this case, BigIP doesn't decrypt TLS connections but accept it.

      • Nicol4s's avatar
        Nicol4s
        Icon for Nimbostratus rankNimbostratus
        Jul 12, 2019

        Hi Stanislas,

        I'm running a cluster w/ TMOS v13 without SSL Forward Proxy license.

        I've followed your article but I end up with the HTTP 503 error in the clients web browser.

         

        However, your configuration works on my 3rd BIG-IP ( VE Lab license with SSL Forward Proxy included )

         

        Any idea ?

         

        Thanks.

  • SWJO's avatar
    SWJO
    Icon for Cirrostratus rankCirrostratus
    Jul 12, 2019

    From my knowledge, in case of Forward proxy.

     

    Forward proxy create SSL by itself and using that SSL Cert on SSL profile.

     

    And that Cert also publish to internal user`s browser.