For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sunshine92_2024's avatar
sunshine92_2024
Icon for Nimbostratus rankNimbostratus
May 21, 2015

Automatically redirecting http to https

Hi, I have created virtual servers for http and https. My client requirement is that http does NOT redirect to https which is somehow happening automatically. So when you open browser pager http://abc.com it automatically switches to https://abc.com and gives cert error. I have not enabled the irule for automatic redirection. Not sure why this is appening , whether it is default behaviou , and how to stop it.

 

Thanks

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
LTM
security

3 Replies

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    May 21, 2015

    Hi Sunshine,

    If you've not applied an iRule or LTM policy for HTTP->HTTPS redirection, this redirect originates from elsewhere. Use cURL to find out: 

    curl -vI http://abc.com
    look for the "Server" header value in response field - if it's not "BigIP", the redirect is not invoked by F5.

    Regards,

  • Michael_Jenkins's avatar
    Michael_Jenkins
    Icon for Cirrostratus rankCirrostratus
    May 21, 2015

    If you don't have any iRules or policies set up on the F5 to redirect the traffic, you may want to check the web server itself. Some applications will redirect users to HTTPS at that level as well. Just a thought from something I've seen before.