For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Geoff_R_32204's avatar
Geoff_R_32204
Icon for Nimbostratus rankNimbostratus
Jun 08, 2010

9.4.8 LTM between apache and weblogic server SSL config.

we are trying (from questions brought up during our most recent PCI compilance exercise) to set up the following.     Apache2/WLPlugin <-SSL-> F5 9.4.8LTM <-SSL-> Oracle/BEA Weblogic server 10....
oracle
partner
Chris_Miller's avatar
Chris_Miller
Icon for Altostratus rankAltostratus
Sep 15, 2010
Eric,

Here's a solution article for you:

http://support.f5.com/kb/en-us/solutions/public/4000/400/sol4443.html?sr=10058313 


To ensure that the BEA WebLogic server uses URLs prefixed with HTTPS://, configure the BIG-IP LTM to insert a header named WL-Proxy-SSL: with a value of true into each request. To do this, you can create a profile using the Configuration utility or the command line. 
 
Note: For information about configuring BIG-IP version 4.x, refer to SOL1511: Configuring BIG-IP to add a header so that BEA WebLogic nodes will generate redirects and links that specify the HTTPS protocol.
 
Configuration utility
To use the configuration utility to create a BIG-IP LTM profile with a BEA WebLogic header insert, perform the following procedure:

Log in to the Configuration utility.

From the main navigation panel, click Local Traffic.

Click Profiles.

From the Profiles screen, click the Create button.

In the name field, type a name for the profile.

From the Parent Profile menu, select http.

In the Request Header Insert field, type the following:

Note: In BIG-IP versions prior to 9.4, this field is labeled Header Insert.

WL-Proxy-SSL: true

Click the Finished button.