Forum Discussion
Citrix Apps fail to load when HTTP profile is enabled
Hi,
I have a virtual server, serving two products using a wildcard certificate for each site (eg iis.site.com and cag.site.com)
One of the sites is IIS with SSL terminated on the VIP, the other is a Citrix Client Access Gateway with and client and server ssl profile to provide SSL through the the CAG.
I wrote an iRule to redirect to the relevant pools and to disable serverssl to the IIS server.
The issue is that when you try to load the Citrix application it doesn't load and eventually times out.
I created a new VIP without the irule to direct traffic to the CAG - without an HTTP profile the Citrix application loads. As soon as I apply an HTTP profile it breaks.
Is there something specific in the HTTP profile that should be configured (although I've tried all options without any luck)
Or can the HTTP profile be removed via an iRule (tried so far unsuccessfully)
when HTTP_REQUEST {
if pool has less than 1 active member and host header is iis.site.com, display page unavailible
if {( [active_members iis.site.com_PROD_POOL] < 1 )
and ( [string tolower [HTTP::host]] equals "iis.site.com" ) } {
HTTP::respond 200 content [class element -name 0 page_unavailible_class]
TCP::close
event disable
}
elseif {[string tolower [HTTP::host]] equals "iis.site.com"} {
disable re-encryption back to the server
SSL::disable serverside
use pool iis.site.com.com_POOL
}
if pool has less than 1 active member and host header is cag.site.com, display page unavailible
if {( [active_members cag.site.com_PROD_POOL] < 1 )
and ( [string tolower [HTTP::host]] equals "cag.site.com" ) } {
HTTP::respond 200 content [class element -name 0 page_unavailible_class]
HTTP::close
event disable
}
elseif {[string tolower [HTTP::host]] equals "cag.site.com"} {
HTTP::disable
use pool cag.site.com_POOL
}
}
Cheers
Lee
3 Replies
- nitass
Employee
is this helpful? - Lee_Sutcliffe
Nacreous
Thanks Nitass, I saw that yesterday (albeit towards the end of the day) so I'll have another look at it with a fresh pair of eyes. - Hamish
Cirrocumulus
The Citrix traffic (ICA) isn't HTTP. That's why it doesn't work. Last time I did this, I created a second VS on :444 and then re-wrote the .ICA file contents to use :444 instead of the :443 VS.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com