Last Modified: Nov 07, 2022
Affected Product(s):
BIG-IP LTM, SWG
Known Affected Versions:
11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2
Fixed In:
11.6.0, 11.5.1 HF3
Opened: Apr 02, 2014 Severity: 2-Critical Related Article:
K16430
The http profile (with proxy-type explicit) lets you specify a route-domain to use for forwarding http (proxy) requests. This route-domain parameter is not always used.
It is not possible to use the HTTP explicit proxy (or SWG) if the target of the connection is not in route-domain 0.
When forwarding proxy requests to an IP address that results from a DNS resolution, the route-domain parameter is not used.
This issue has no workaround at this time.
When forwarding proxy requests to an IP address that results from a DNS resolution, the route-domain parameter is now used correctly and it now is possible to use the HTTP explicit proxy (or SWG) when the target of the connection is not in route-domain 0.