Forum Discussion
truongh_36312
Nimbostratus
Nimbostratuscleartext redirect to SSL
Hi,
We have BIGIP (10.2.3) LTM, we need to redirect to SSL all the incoming cleartext traffic on the URLs (port80). Do we have any way to do it?
thanks advance for your reply.
truongh_36312Nimbostratus
NimbostratusWesleyjack, Thanks for your quick reply, I know the irule to redirect from http to https, but in case if we don't want to have virtual server using https(443) with certificate, do you have any way to implement it without create new virtual server port 443? Thanks in advance.
wesleyjackNimbostratus
NimbostratusHien,
So, the scenario is you have a virtual server (VS) on your F5 using service port 80. You do not want to create a VS on the same F5 using 443. Does this 443 VS exist on a separate F5?
Something has to respond to the IP on port 443. For example, let's say your FQDN is www.hien.com. Let's also say www.hien.com resolves to 1.1.1.1. Lastly, you have a VS on your F5 listening on 1.1.1.1:80. If you establish a HTTP-HTTPS redirect for www.hien.com on the VS, then you would need another VS on your F5 listening to 1.1.1.1:443. If nothing is listening to 1.1.1.1:443, then the redirect will work but the client will get no response to their TCP SYNs.
