Doing an HTTP to HTTPS redirect and need to exclude an address or range

You should be able to use the IP::client_addr command to return the IP address of the client, and then determine if it needs to be redirected.

 

 

Hugs and Kisses,

 

Bill Wash

 

 

 

 

 

iRule to redirect HTTP to HTTPS except for a specific IP address

 

===============================

 

 

when HTTP_REQUEST {

 

 

if {IP::client_addr not equals x.x.x.x}

 

 

{HTTP::redirect https://[HTTP::host][HTTP::uri]}

 

 

}

Unfortunately, that syntax is not accurate. Can you reply back with it as it would be coded?

 

 

Can any one else shed some light?

Hi Steve --

 

 

Are you using BIG-IP 4.x or LTM v9.x?

 

 

(The rule you posted is a v9 rule, but this is the v4 forum.)

BIG-IP 9.4.0 Build 517.5

 

 

So, I guess BigIP 9.x. Sorry, little confused. Thought the BigIP was running 9.x and the iRules were 4.x

 

 

Given that, can you possibly offer some advice how to accomplish this?

sure, no problem.

 

 

The iRules version is the same as the product version. Some 4.x commands are supported by v9 for backward compatibility, but most have been replaced with newer versions.

 

 

I think a simple rule referencing a class (data group list) listing hosts & subnets would work best. First create a class of type Address that includes the hosts & subnets, then create a v9 iRule like this referencing the class (class should be named "HTTPAllowedHosts", otherwise adjust the calss name in the code):

when HTTP_REQUEST {
  if {!([matchclass [IP::client_addr] equals $::HTTPAllowedHosts])}{
    HTTP::redirect https://[HTTP::host][HTTP::uri]
  }
}

 

 

/deb