For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dan_19334's avatar
dan_19334
Icon for Nimbostratus rankNimbostratus
Dec 20, 2010
Solved

determine HTTP or HTTPS

What is the best way to determine if the connection came in HTTP or HTTPS? I want to have a common iRule applied to both port 80 & 443 that redirects the connection to a different location but keeps ...
application delivery
dev
devops
iRules
  • Vova_200520's avatar
    Vova_200520
    Sep 24, 2015

    Patrik, good one. You have typo. It should be:

    if { [PROFILE::exists clientssl] == 1 } {
    set protocol "https"
} else {
    set protocol "http"
}

    I'm doing this on CLIENT_ACCEPTED. The method with CLIENTSSL_HANDSHAKE will not work because BIG-IP refuse to load it on VS without SSL profile.

Vova_200520's avatar
Vova_200520
Icon for Altostratus rankAltostratus
Sep 24, 2015

Patrik, good one. You have typo. It should be:

if { [PROFILE::exists clientssl] == 1 } {
    set protocol "https"
} else {
    set protocol "http"
}

I'm doing this on CLIENT_ACCEPTED. The method with CLIENTSSL_HANDSHAKE will not work because BIG-IP refuse to load it on VS without SSL profile.

  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Icon for Nacreous rankNacreous
    Oct 25, 2016

    Given the predilection for TCL that 0 is false and anything else is true you can shorten this to....

    if {[PROFILE::exists clientssl]} {
    set protocol https
} else {
    set protocol http
}

    But you can even get more funky with TCL ? conditions

    set protocol [[PROFILE::exists clientssl]?https:http]