Forum Discussion

heikaljaffar_16's avatar
heikaljaffar_16
Icon for Nimbostratus rankNimbostratus
Feb 12, 2016

HTTP-Forward-Proxy step by step

hi, am new to F5 and want to use F5 big-ip 11.6 to be a web proxy for http and https outgoing access

 

Can anyone guide me how to achive this?

 

Am trying to use this https://devcentral.f5.com/wiki/irules.HTTP-Forward-Proxy-v3-2.ashx

 

IS below steps correct? 1) create a virtual server and assign IP select Type = standard or Forwarding ?? 2) assign DNS 3) create irule and assign to the VS

 

test?

 

5 Replies

  • Hi Heikaljaffar,

     

    let me answer your questions...

     

    1. Its a Standard Virtual Server with HTTP profile selected
    2. Yes
    3. Yes
    4. Point your browser to the IP:Port of the Virtual Server

    Cheers, Kai

     

  • thanks Kai. I tried that but got proxy not responding on my browser. the virtual server source address is 0.0.0.0/0 and destination address is the internal IP service port 80 and another virtual server service port 443 http profile is HTTP Source Address Translation is Automap

     

    am trying to capture the ip going out through firewall but dont see any traffic source from my Virtual server IP and destination Internet.

     

  • thanks Kai. I tried that but got proxy not responding on my browser. the virtual server source address is 0.0.0.0/0 and destination address is the internal IP service port 80 and another virtual server service port 443 http profile is HTTP Source Address Translation is Automap

     

    am trying to capture the ip going out through firewall but dont see any traffic source from my Virtual server IP and destination Internet.

     

  • Its working now!

     

    As mentioned by Kai , the browser needs to point to virtual server IP and corresponding port. my virtual server is using port 443 so i tried putting the browser proxy port to 443 and tried https://www.google.com which works fine.

     

    • Kai_Wilke's avatar
      Kai_Wilke
      Icon for MVP rankMVP
      Thats why I've silently added 4.) to my answers... ;-) Cheers, Kai