Forum Discussion
Nick_Kiss_25844
Nimbostratus
Dec 29, 2005Bind HTTP & HTTPS Traffic To Same Node
I'm new to BIG IP and iRules, so please excuse me.
I have a situation whereby I need to bind HTTP and HTTPS requests for a given client to a single node. Limitations on the server side basically require that the same webserver handle all requests (secure & non-secure) for a given client.
I've taken a look at the iRules documentation and there does not appear to be a straightforward solution. Any suggestions?
5 Replies
- Colin_Walker_12Historic F5 AccountI'm not sure I understand why an iRule would be necessary here. If you're just looking to ensure that all requests from a given client end up at the same webserver, you'd be talking about persistence, which can easily be enabled via the GUI in many different forms.
-Colin - unRuleY_95363Historic F5 AccountYou likely don't need an iRule. As Colin suggests, you need persistence. The persistence profile have a couple of settings to help solve your problem. Unless you decide to use cookie persistence, you will probably want to use the across virtuals and across pools settings to allow a persistence record to be applied to different pools.
You will want two virtuals - one for the http traffic and one for the https traffic. Then you will also have two pools - one pool for the http traffic and one pool for the https traffic but both with the same nodes. Then configure your persistence method and apply it to both virtuals. - Aue_Np_7209
Nimbostratus
dear unruley,
i have configured by following your advice and tried to login in many time. some time it's work but some time it isn't.
my configuration is
1. BIG/IP have been configured to use the same persistent profile (source_addr or cookie).
2. 2 virtual servers (different service port: 80 or 443)
3. 2 pools (the same host, different port: 80 or 443)
4. i tried to enable "match across pool" and "match across virtual" but it's still not work properly.
aue - unRuleY_95363Historic F5 AccountWhat about "match across services"?
- david_wang_2073Historic F5 AccountThe straightforward way to do this is using source address affinity persistence plus across service.
If you would like to use cookie persistence, the across service might not work, then you have to use iRule to do this.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects