Forum Discussion

f51's avatar
f51
Icon for Cumulonimbus rankCumulonimbus
Aug 16, 2017

Endless Redirction Loop

Hi DC,   One VIP configured on port 80 and now we want to use on port 443. So when I created VIP on 443 and added redirection irule for VIP:80. But when I am trying to access the https://abc.exper...
application delivery
LTM
cjunior's avatar
cjunior
Icon for Nacreous rankNacreous
Aug 16, 2017

It looks like you are in this scenario:

1: Client request VS:80

2. VS:80 send redirect to VS:443

3. VS:443 does SSL offload and send clear traffic to a pool member

4. Pool member send clear traffic redirect to http://abc.expert.com, and it start the loop.

So, you may need to rewrite the pool member response to https traffic, like this:

when HTTP_REQUEST {
    STREAM::disable
    set host [getfield [HTTP::host] ":" 1]
}
when HTTP_RESPONSE {
    if { [HTTP::header value Content-Type] contains "html" } {
        STREAM::expression "@http://$host@https://$host@"
        STREAM::enable
    }
    if { [HTTP::is_redirect] && [string tolower [HTTP::header Location]] starts_with "http://$host"} {
        HTTP::header replace Location [string map -nocase "http://$host https://$host" [HTTP::header Location]]
    }
}

Here in DC have many examples that you can use 🙂

Regards.