Reverse Proxy with LDAP Groups per URI

Hi,

• for reverse proxy with group based uri access, you can create one ACL per group, and assign to groups with "AD group resource assign" (Access policy type All necessary to get "AD group resource assign" box)

   

• for pool server assignment based on URI, you can use Local traffic policies which is easier than irules.

   

• Before think about rewriting, you can check if app servers really need it.

   

  • some app servers does not need rewriting as all links in response page are relative.
  • some app servers support to configure reverse proxy hostname, port and protocol, all links in response page contains the right client side URL.
  • if app server is defined to allow requests for a internal hostname, you can add external URI in server name configuration.
• If rewriting is necessary, try first a rewrite profile instead of irules.