For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

logan92's avatar
logan92
Icon for Altocumulus rankAltocumulus
Dec 07, 2023

Exclude certain of HTTP URLs from HTTPS Traffic

Hi,

I have HTTPs VIP on port 443 , the backend app has few urls in http (some content in webpage using http (Mixed Content)) that doesn't work with F5 HTTPS offloading, I want those  HTTP URLs to be handled as HTTP not HTTPs traffic , how can i do that?

application delivery
devops

3 Replies

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Dec 07, 2023

    is it possible to fix the mixed content issue with a stream profile? That would be the better path, but would need to know more about your application and the delivery configuration.

    • logan92's avatar
      logan92
      Icon for Altocumulus rankAltocumulus
      Dec 12, 2023

      yes , issue is fixed by using stream profile in this article https://my.f5.com/manage/s/article/K31100432 , but error message  appeared in another webpage in website which webpage can't load. and when i remove stream profile ,webpage works normally. 
      note: asp.net webserver uses www-authentication header: NTLM , i don't know if this related to the issue or not.

  • zamroni777's avatar
    zamroni777
    Icon for MVP rankMVP
    Dec 08, 2023

    i had similar situation.
    the ideal solution is changing the app to always use relative paths.

    if it's on different hostname/ip, use //address when referencing to other address, instead of http://... or https://...
    browser will automatically use https if calling window is https

    for workaround, you can create http virtual server vip:80