Forum Discussion

dan_19334's avatar
dan_19334
Icon for Nimbostratus rankNimbostratus
Dec 20, 2010

determine HTTP or HTTPS

What is the best way to determine if the connection came in HTTP or HTTPS? I want to have a common iRule applied to both port 80 & 443 that redirects the connection to a different location but keeps ...
application delivery
dev
devops
iRules
  • Vova_200520's avatar
    Vova_200520
    Sep 24, 2015

    Patrik, good one. You have typo. It should be:

    if { [PROFILE::exists clientssl] == 1 } {
    set protocol "https"
} else {
    set protocol "http"
}

    I'm doing this on CLIENT_ACCEPTED. The method with CLIENTSSL_HANDSHAKE will not work because BIG-IP refuse to load it on VS without SSL profile.

Vova_200520's avatar
Vova_200520
Icon for Altostratus rankAltostratus

Patrik, good one. You have typo. It should be:

if { [PROFILE::exists clientssl] == 1 } {
    set protocol "https"
} else {
    set protocol "http"
}

I'm doing this on CLIENT_ACCEPTED. The method with CLIENTSSL_HANDSHAKE will not work because BIG-IP refuse to load it on VS without SSL profile.

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Oct 25, 2016

Given the predilection for TCL that 0 is false and anything else is true you can shorten this to....

if {[PROFILE::exists clientssl]} {
    set protocol https
} else {
    set protocol http
}

But you can even get more funky with TCL ? conditions

set protocol [[PROFILE::exists clientssl]?https:http]