Forum Discussion

igor_'s avatar
igor_
Icon for Altocumulus rankAltocumulus
Dec 22, 2023

F5 TCP Proxy mode

Hi all,

I am trying to mimic some settings from HAProxy and migrate them to F5.

In HAProxy we have what is called TCP proxy mode where HAProxy doesn't terminate SSL connection but just connects the client directly to the backend servers.

That config looks like this:

 
frontend myfrontend_https
mode tcp
bind 192.168.11.11:443
option tcplog
use_backend web_servers
 
backend web_servers
mode tcp
balance roundrobin 
server s1 192.168.0.10:9443 check
server s2 192.168.0.11:9443 check
 
So with this config client connects over HTTPS protocol directly to the backend servers and they are served certificates from those servers.
I am not using any certs on HAProxy frontend, nor the backend.
 
I have looked into F5 documentation and couldn't find anything similar.
Does anyone have any suggestions?
 
Thanks, Igor

3 Replies