HTTP Explicit Proxy - V11.5+

Problem this snippet solves:

This iApp configures an Explicit Proxy using the new "Explicit" Proxy Mode that was introduced into the HTTP Profile in BIG-IP 11.5.

You only need LTM or APM provisioned.

It creates all configuration components required including:

  • DNS Resolvers
  • TCP Tunnel
  • HTTP Profile (Explicit)
  • Default Connect Handling set to Allow
  • SNAT Pools (Optional)
  • SNAT Default is Automap

If you require the Explicit Proxy to listen on more than 1 port e.g 3128 and 8080, simply just create another Application Service.

Contributed by: Brett Smith

How to use this snippet:


Published Mar 11, 2015
Version 1.0
explicit
forward proxy
iapp
iApps
LTM
security

Was this article helpful?

14 Comments

Sort By
Show More
  • Leo_S_356957's avatar
    Leo_S_356957
    Icon for Nimbostratus rankNimbostratus
    Apr 04, 2018

    Hello,

    I am trying to automate creation of this iapp. So far I have got the following variables and tables:

    tmsh create sys application service Proxy { template f5.explicit_proxy tables add { tmsh show /sys serviceresolver__rootresolvers { column-names { ip } rows { { row { 8.8.8.8 } } } } proxy__client_vlan { column-names { vlans } rows { { row { internal } } } } } variables add { proxy__explicit__ip { value 10.51.126.5 } proxy__name { value Proxy } proxy__explicit__port { value 3128 } resolver__intresolvers { value /default } proxy__snatpool { value /default } } }

    and I am geting an error:

    Syntax Error: incomplete command

    Can anyone help get this working?

    Many Thanks

  • NVSmithers's avatar
    NVSmithers
    Icon for Nimbostratus rankNimbostratus
    Nov 28, 2018

    Is this designed to work with version 13.1.1? I cant seem to get it to work to save my life.

     

  • viktor_kloezer's avatar
    viktor_kloezer
    Icon for Nimbostratus rankNimbostratus
    May 16, 2019

    Hi Brett, the link seems to be not valid anymore. Can you, please provide a new one? Thanks a lot!