| Description | This article describes what causes of some URLs not working as expected after forwarding them to the upstream proxy. |
| Scope | FortiProxy. |
| Solution |
Forwarding specific URLs to upstream proxy in proxy chain setup was described in the KB article Technical Tip: Forwarding specific URLs only to upstream Proxy in Proxy Chain setup.
It was observed that some URLs were not working as expected and giving different kinds of errors, such as the website not loading, some subdomains not functioning and etc.
During the investigation, it was identified that not only the main website should be forwarded, but also the associated websites should be forwarded to the upstream proxy. When associated websites are treated locally (downstream proxy), the source of the traffic is different, hence the original traffic does not get the full information.
Below is an example of such a case, which included youtube.com.
Initially, only youtube.com was forwarded to the upstream proxy as below,
User experience was as follows.
In the example of youtube.com, it was required to forward 'video.google.com' to the upstream as this website is associated with youtube.com.
Hence, instead of adding just a single URL, it is required to add a list of URLs associated with the main URL. This has to be dealt with case by case based on the URL. URL list can be added to 'server URL' as guided by the article Technical Tip: Use URL-list or Wildcard in Server URL. |
