HTTP Connect

Objective

This guide provides instructions on how to create a HTTP Connect Proxy using the guided wizards in F5® Distributed Cloud Services.

An HTTP proxy operates between the sending Web server and your receiving Web client. It processes the HTTP protocol line-by-line for any potentially harmful content before sending it to an internal Web client. It also acts as a buffer between your Web server and potentially harmful Web clients by enforcing HTTP RFC compliance, and preventing potential buffer overflow attacks.

image4
Figure: HTTP Connect Overview

Using the instructions provided in this guide, you will be able to create an HTTP Proxy using the HTTP CONNECT method.


Prerequisites

The following prerequisites apply:

Note: If you do not have an account, see Create an Account.


Configuration

Create HTTP Connect Proxy

HTTP can be viewed and managed in multiple services: Distributed Apps, Web App & API Protection, and Load Balancers.

This example shows HTTP setup in Load Balancers.

Step 1: Log into F5® Distributed Cloud Console, start HTTP Connect object creation.

Change to your application namespace in the namespace selector in the primary navigation bar.

  • Open F5® Distributed Cloud Console > select Load Balancers box.

Note: Homepage is role based, and your homepage may look different due to your role customization. Select All Services drop-down menu to discover all options. Customize Settings: Administration > Personal Management > My Account > Edit work domain & skills button > Advanced box > check Work Domain boxes > Save changes button.

NEW HOME PAGE C
Figure: Homepage

Note: Confirm Namespace feature is in correct namespace, drop-down selector located in upper-left corner. Not available in all services.

  • Select Manage in left-menu > select Load Balancers > HTTP Connect & DPRs.

Note: If options are not showing available, select Show link in Advanced nav options visible in bottom left corner. If needed, select Hide to minimize options from Advanced nav options mode.

  • Select Add HTTP Connect & DRP button.

HTTP 2
Figure: HTTP

Step 2: Configure meta data and proxy type.
  • Enter Name, enter Labels and Description as needed.

    • Optionally, set label key-value pairs in the Labels box.
  • Toggle Show Advanced Fields in Proxy Type box.

  • Select Proxy Type in drop-down menu in HTTP Connect or Dynamic Reverse Proxy.

  • Select HTTP Connect Proxy option in the HTTP Connect drop-down menu that adjusts below.

  • Select HTTP Connect option in the HTTP Connect drop-down menu that adjusts below.

    • HTTP Connect: Use this option for HTTP Connect proxy.
  • Select Configuration link in Advanced Options, new form will load.

  • Toggle Show Advanced Fields in all boxes.

  • Configure options as needed.

    • Options: Header Options, Error Response Options, Buffer Policy, and Compression Parameters.
  • Select Apply button to apply advanced options and return to HTTP Connect and DRP page.

HTTPCONNECT3 2
Figure: Proxy Type

Step 3: Set sites or virtual sites for proxy.

Select sites or virtual sites where you want to install this proxy.

  • The Select Sites for Proxy drop-down menu has Sites or Virtual Sites populated by default.

Note:Do Not Instantiate is the other Site Proxy option in the drop-down menu.

  • Select Configure link in Site or Virtual Site section.

HTTP SITESVS
Figure: Sites or Virtual Sites Configuration

  • The Custom Advertise VIP Configuration page opens.

  • Select + Add Item button.

HTTP VS2
Figure: Sites or Virtual Sites Custom Advertise VIP Configuration

  • Select Where to Advertise option in drop-down menu.

    • Select Site to install the proxy on a site.

    • Select Virtual Site to install the proxy on a virtual site.

  • Select one of the following options for the Site Network drop-down menu:

    • Inside and Outside Network

    • Inside Network

    • Outside Network

    • vK8s Service Network

  • Select Virtual Site Reference or Site Reference drop-down menu option.

Note: Option dependent on Select Where to Advertise option selected.

Note: Select Virtual Site you have created, or + Create new Virtual Site with button at the bottom of pop-up menu.

  • Toggle Show Advanced Fields option to show IP Address box.

Note: IP Address box is only available when Site option is selected.

  • TCP Listen Port Choice drop-down menu populates with TCP Listen Port option by default. Use Default Listen Port option available.

  • Enter port in TCP Listen Port box.

Note: This is the port for your HTTP Connect Proxy to listen to requests.

  • Select Add Item button.

Note: You can add more sites or virtual sites to advertise using the Add item option.

HTTPADD 7
Figure: Advertise policy configuration

Step 4: Set network for upstream connections.

Select which network is going to be used to discover and send the request to your final endpoint.

  • Select Upstream Network option in drop-down menu in Upstream Network section.

    • Site Local Network (Outside): Real endpoint is reachable via outside interface.

    • Site Local Network Inside: Real endpoint is reachable via inside interface.

HTTP UPSTREAMNETWORK6
Figure: Upstream Network

Step 5: Configure proxy policy.

Configure policies for this proxy. Go to Proxy Policy section, and select an option for the Manage Proxy Policy field.

  • Select Manage Proxy Policies option in drop-down menu.

    • Disable proxy policy: With this option, no policies are installed on this proxy.

    • Active proxy policies: To set a policy. From the options for the Forward Proxy Policies field, select an existing forward proxy policy, or select Create new forward proxy policy to create and apply a new policy.

    Note: Select + Add Item button to add additional Forward Proxy Policies options.

HTTP PROXY 5 2
Figure: Proxy Policy

Step 6: Complete creating the HTTP Connect object.

Select Save and Exit to complete creating the HTTP Connect object.

Note: You can monitor the HTTP Connect Proxy in F5® Distributed Cloud Console. Navigate to the Virtual Hosts > HTTP Connect & DRP page in your application namespace, and select your HTTP Connect Proxy in the displayed list of objects.


Concepts


API References