101 · Question #617
in which scenario is a full proxy TCP connection required?
The correct answer is D. when the client and server connection are decoupled. A full proxy TCP architecture is required when the load balancer must terminate the client TCP session independently from the server TCP session, fully decoupling the two connections.
Question
in which scenario is a full proxy TCP connection required?
Options
- Awhen DNS load balancing is performed
- BWhen source NAT is demanded
- Cwhen the client source IP address is sent to the server
- Dwhen the client and server connection are decoupled
How the community answered
(52 responses)- A17% (9)
- B4% (2)
- C6% (3)
- D73% (38)
Why each option
A full proxy TCP architecture is required when the load balancer must terminate the client TCP session independently from the server TCP session, fully decoupling the two connections.
DNS load balancing resolves client queries to a server IP address directly, so the client connects to the server without any intermediary TCP proxy being required.
Source NAT rewrites source IP addresses and can be applied in a pass-through or one-arm mode without establishing a separate proxy TCP session toward the server.
Preserving the original client source IP on the server side is actually easier in a non-full-proxy pass-through mode; full proxy by default replaces the source IP and requires extra configuration such as X-Forwarded-For to convey the client address.
In a full proxy model the BIG-IP (or any full proxy device) maintains two completely independent TCP state machines - one facing the client and one facing the server - with the proxy mediating between them. This decoupling is the defining architectural characteristic of a full proxy and enables the device to buffer, transform, or optimize each side of the connection independently regardless of what the other side is doing.
Concept tested: Full proxy TCP decoupling client and server connections
Source: https://my.f5.com/manage/s/article/K8082
Topics
Community Discussion
No community discussion yet for this question.