Forum Discussion
Citrix Apps fail to load when HTTP profile is enabled
Hi,
I have a virtual server, serving two products using a wildcard certificate for each site (eg iis.site.com and cag.site.com)
One of the sites is IIS with SSL terminated on the VIP, the other is a Citrix Client Access Gateway with and client and server ssl profile to provide SSL through the the CAG.
I wrote an iRule to redirect to the relevant pools and to disable serverssl to the IIS server.
The issue is that when you try to load the Citrix application it doesn't load and eventually times out.
I created a new VIP without the irule to direct traffic to the CAG - without an HTTP profile the Citrix application loads. As soon as I apply an HTTP profile it breaks.
Is there something specific in the HTTP profile that should be configured (although I've tried all options without any luck)
Or can the HTTP profile be removed via an iRule (tried so far unsuccessfully)
when HTTP_REQUEST {
if pool has less than 1 active member and host header is iis.site.com, display page unavailible
if {( [active_members iis.site.com_PROD_POOL] < 1 )
and ( [string tolower [HTTP::host]] equals "iis.site.com" ) } {
HTTP::respond 200 content [class element -name 0 page_unavailible_class]
TCP::close
event disable
}
elseif {[string tolower [HTTP::host]] equals "iis.site.com"} {
disable re-encryption back to the server
SSL::disable serverside
use pool iis.site.com.com_POOL
}
if pool has less than 1 active member and host header is cag.site.com, display page unavailible
if {( [active_members cag.site.com_PROD_POOL] < 1 )
and ( [string tolower [HTTP::host]] equals "cag.site.com" ) } {
HTTP::respond 200 content [class element -name 0 page_unavailible_class]
HTTP::close
event disable
}
elseif {[string tolower [HTTP::host]] equals "cag.site.com"} {
HTTP::disable
use pool cag.site.com_POOL
}
}
Cheers
Lee
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com