HTTP Connect

Objective

This guide provides instructions on how to create a HTTP Connect Proxy using the guided wizards in F5® Distributed Cloud Services.

An HTTP proxy operates between the sending Web server and your receiving Web client. It processes the HTTP protocol line-by-line for any potentially harmful content before sending it to an internal Web client. It also acts as a buffer between your Web server and potentially harmful Web clients by enforcing HTTP RFC compliance, and preventing potential buffer overflow attacks.

image4
Figure: HTTP Connect Overview

Using the instructions provided in this guide, you will be able to create an HTTP Proxy using the HTTP CONNECT method.


Prerequisites

The following prerequisites apply:

Note: If you do not have an account, see Create an Account.


Configuration

Create HTTP Connect Proxy

This example shows HTTP setup in Multi-Cloud App Connect.

Step 1: Log into F5 Distributed Cloud Console, start HTTP Connect object creation.

Change to your application namespace in the namespace selector in the primary navigation bar.

  • Open F5 Distributed Cloud Console > select Multi-Cloud App Connect box.

Note: Homepage is role based, and your homepage may look different due to your role customization. Select All Services drop-down menu to discover all options. Customize Settings: Administration > Personal Management > My Account > Edit work domain & skills button > Advanced box > check Work Domain boxes > Save changes button.

NEW HOME PAGE C
Figure: Homepage
  • Select Manage in left-menu > select Load Balancers > HTTP Connect & DPRs.

Note: If options are not showing available, select Show link in Advanced nav options visible in bottom left corner. If needed, select Hide to minimize options from Advanced nav options mode.

  • Select Add HTTP Connect & DRP button.
HTTP 2 2
Figure: HTTP
Step 2: Configure meta data and proxy type.
  • Enter Name.

  • Enter Labels and Description as needed.

  • Toggle Show Advanced Fields in Proxy Type box.

  • Select Proxy in drop-down menu in HTTP Connect or Dynamic Reverse Proxy.

  • Select HTTP Connect option in the HTTP Connect drop-down menu that adjusts below.

    • HTTP Connect: Use this option for HTTP Connect proxy.
  • Toggle Show Advanced Fields in Sites or Virtual Sites box.

  • Select Configure link in Advanced Options to customize as needed, new form will load.

  • Configure options as needed.

    • Options: Header Options, Error Response Options, Buffer Policy, and Compression Parameters.
  • Select Apply button to apply advanced options and return to HTTP Connect and DRP page.

HTTPCONNECT3 2 2
Figure: Proxy Type
Step 3: Set sites or virtual sites for proxy.

Select sites or virtual sites where you want to install this proxy.

  • Select Sites for Proxy drop-down menu has Sites or Virtual Sites populated by default.

  • Toggle Show Advanced Fields in Sites or Virtual Sites box to show Do Not Instantiate option.

  • Select Configure link in Site or Virtual Site section.

HTTP SITESVS 2
Figure: Sites or Virtual Sites Configuration
  • The Custom Advertise VIP Configuration page opens.

  • Select + Add Item button.

HTTP VS2 2
Figure: Sites or Virtual Sites Custom Advertise VIP Configuration
  • Toggle Show Advanced Fields.

  • Select Where to Advertise drop-down menu option:

    • Select Site to install the proxy on a site.

    • Select Virtual Site to install the proxy on a virtual site.

  • Select one of the following options for the Site Network drop-down menu:

    • Inside and Outside Network

    • Inside Network

    • Outside Network

    • Outside Network with internet VIP

    • Inside and Outside Network with Internet VIP

  • Select Virtual Site Reference or Site Reference drop-down menu option.

Note: Option dependent on Select Where to Advertise option selected.

Note: Select Virtual Site you have created, or + Create new Virtual Site with button at the bottom of pop-up menu.

Note: IP Address box is only available when Site option is selected.

  • TCP Listen Port Choice drop-down menu populates with TCP Listen Port option by default. Use Default Listen Port option available.

  • Enter port in TCP Listen Port box.

Note: This is the port for your HTTP Connect Proxy to listen to requests.

  • Select Apply button.

Note: You can add more sites or virtual sites to advertise using the Add item option.

HTTPADD 7 2
Figure: Advertise policy configuration
Step 4: Set network for upstream connections.

Select which network is going to be used to discover and send the request to your final endpoint.

  • Select Upstream Network option in drop-down menu in Upstream Network section.

    • Site Local Network (Outside): Real endpoint is reachable via outside interface.

    • Site Local Network Inside: Real endpoint is reachable via inside interface.

HTTP UPSTREAMNETWORK6 2
Figure: Upstream Network
Step 5: Configure proxy policy.

Configure policies for this proxy. Go to Proxy Policy section, and select an option for the Manage Proxy Policy field.

  • Select Manage Proxy Policies option in drop-down menu.

    • Disable Proxy Policy: With this option, no policies are installed on this proxy.

    • Active Proxy Policies: To set a policy. From the options for the Forward Proxy Policies field, select an existing forward proxy policy, or select Create new forward proxy policy to create and apply a new policy.

HTTP PROXY 5 2 2
Figure: Proxy Policy
Step 6: Complete creating the HTTP Connect object.

Select Save and Exit button to complete creating the HTTP Connect object.

Step 7: Monitor HTTP Connect.

You can monitor the HTTP Connect Proxy in F5®Distributed Cloud Console.

  • Navigate to Virtual Hosts > HTTP Connect & DRP page in your application namespace.

  • Select your HTTP Connect Proxy in the displayed list of objects.


Concepts


API References