For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

milo's avatar
milo
Icon for Nimbostratus rankNimbostratus
Jul 06, 2009

consolidate all http to https request under one virtual server

I would like to create one virtual server that uses a network segment to support all incoming http requests. The majority of my company's http traffic is redirected to https. I've come up with four di...
application delivery
dev
devops
iRules
milo's avatar
milo
Icon for Nimbostratus rankNimbostratus
Jul 06, 2009
The majority of our public facing sites are built with two virtual servers; one listening on port 80 and the other listening on port 443. We're using a class C block for all the virtuals. The webservers are segmented into different vlans according to the application being supported.

 

 

What I would like to accomplish is to get away from creating virtual servers listening on port 80 that are primarily used to redirect http traffic to https. Setting up one virtual server that uses our virtual IP network segment with a port 80 listener seemed like a good start. Then, applying the four iRules above to that virtual server will allow the F5 to direct http requests to the correct https URI as they hit the VIP. I can configure the iRules to redirect http requests based on the domain name or URI content for any traffic coming in on that class C block.