Forum Discussion

Peter_Salama_20's avatar
Peter_Salama_20
Icon for Nimbostratus rankNimbostratus
May 12, 2015

F5 SSL offloading and Port redirection

Dear Support,

 

I need your help on to create a https VIP on F5 that terminates SSL from the client and send http traffic to the server on

 

5 Replies

  • You can set up the VIP with a client side ssl profile and an http profile to offload the HTTPS traffic, and then assign it a pool whose member(s) are set up for port 19000. On the VIP configuration if you change the

    Configuration
    to
    Advanced
    from Basic, I think the
    Address Translation
    and
    Port Translation
    options are automatically checked, which should accomplish what you're asking for.

  • You also might want to add an irule to redirect people from the root page of say to with an irule like:

    when HTTP_REQUEST {
       HTTP::redirect https://[getfield [HTTP::host] ":" 1]/workspace/index.jsp
    }
    
  • Hi,

    I have tried below iRule and the redirection is happening for the URI but the protocol is http instead of https

    when HTTP_REQUEST { if { [HTTP::host] equals "website"}{ if { [HTTP::uri] equals "/" } {

        HTTP::redirect "http://[HTTP::host]/workspace/index.jsp"
    }
    

    } }

    • Max_Q_factor's avatar
      Max_Q_factor
      Icon for Cirrocumulus rankCirrocumulus
      It appears that the back end is HTTP but HTTPS from the client's prospective. Have you tried changing your redirect to "https://[HTTP::host]/workspace/index.jsp" ?
  • How about this? If the URI is empty, it'll redirect to workspace/index.jsp (using the same hostname)

    when HTTP_REQUEST {
        if { "[string tolower [HTTP::host]][HTTP::uri]" equals "www.example.com/" } {
            HTTP::redirect "/workspace/index.jsp"
        }
    }