NimbostratusURI rewrite like ISA 2006 / TMG 2010
Hi folks, I searched on dev central but there does not seem to be a definitive answer to our question. I think a cookbook might help.
Our situation is this:
We're replacing an aging ISA 2006 farm that handles our reverse proxy needs. BigIP with APM has been touted as the do it all magic solution to pick up that role now that Microsoft has left us hanging (thanks for nothing MS btw)
Our ISAs are configured so they answer on the "public" side with adresses like "Application1.MyCompany.com" and then ISA ,through a rule, will forward that to "Application1.Internal.MyCompany.com". ISA resolutly lives in a layer 7 world the rule that I just described relies heavily on DNS to work and it does what it does very well. It also does something incredibly useful in that it translates the URIs from the "public" name to the "Private" name.
Now being a "server" guy (like my network admins like to taunt at me), I too live in a layer 7 world but is seems that the BigIP doesn't. In fact the features of ISA are not so easily done on BigIP. Now we're stuck trying to converts hundreds of those ISA rules and recreate them on F5 but we hand up having really "weird" conversation with the network guys managing our BigIPs. Conversations like:
Server guy: Yeah so I need Bob.mycompany.com to translate to Gary.internal.mycompany.com and forward all traffic to it.
Network guy: So what's the IP for Gary.internal.mycompany.com
Server guy: Uhh, do we care?
Network guy: Yeah, I gotta create a VS in APM and that VS directs traffic to a pool that contains nodes and I gotta know the IP from those nodes.
Server guy: That kinda sucks doesn't it? ISA never asks us for IPs...
Network guy: I'm not done, that URL rewrite thingy? We don't do that.
Server guy: But my web site is all configured to listen on "Gary.internal.mycompany.com" and my webmasters all use fixed url instead of relative and we don'T have the budget to fix it all
Network guy: Not my problem!
And thus the great divide endures... I don't know who's wrong here, is it my network guys just being difficult or is ISA/TMG truly a unique product that will disappear forever only to be remembered as a magical artifact that could perform fantastical feats such a URI rewriting and only the elders of our tribe remembers the ancient and arcane knowledge required to use it!
So what are my options here, call F5 get our money back? The device and the software seem more that capable to handle what we're trying to do but there doesn't seem to be a definitive guide or cookbook to achieve it.
Thanks in advance for all your help!
