Forum Discussion

Nick_Kiss_25844's avatar
Nick_Kiss_25844
Icon for Nimbostratus rankNimbostratus
Dec 29, 2005

Bind HTTP & HTTPS Traffic To Same Node

I'm new to BIG IP and iRules, so please excuse me.

 

 

I have a situation whereby I need to bind HTTP and HTTPS requests for a given client to a single node. Limitations on the server side basically require that the same webserver handle all requests (secure & non-secure) for a given client.

 

 

I've taken a look at the iRules documentation and there does not appear to be a straightforward solution. Any suggestions?

5 Replies

  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    I'm not sure I understand why an iRule would be necessary here. If you're just looking to ensure that all requests from a given client end up at the same webserver, you'd be talking about persistence, which can easily be enabled via the GUI in many different forms.

     

     

    -Colin

     

  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    You likely don't need an iRule. As Colin suggests, you need persistence. The persistence profile have a couple of settings to help solve your problem. Unless you decide to use cookie persistence, you will probably want to use the across virtuals and across pools settings to allow a persistence record to be applied to different pools.

     

     

    You will want two virtuals - one for the http traffic and one for the https traffic. Then you will also have two pools - one pool for the http traffic and one pool for the https traffic but both with the same nodes. Then configure your persistence method and apply it to both virtuals.
  • dear unruley,

     

     

    i have configured by following your advice and tried to login in many time. some time it's work but some time it isn't.

     

     

    my configuration is

     

     

    1. BIG/IP have been configured to use the same persistent profile (source_addr or cookie).

     

    2. 2 virtual servers (different service port: 80 or 443)

     

    3. 2 pools (the same host, different port: 80 or 443)

     

    4. i tried to enable "match across pool" and "match across virtual" but it's still not work properly.

     

     

     

    aue
  • david_wang_2073's avatar
    david_wang_2073
    Historic F5 Account
    The straightforward way to do this is using source address affinity persistence plus across service.

     

     

    If you would like to use cookie persistence, the across service might not work, then you have to use iRule to do this.