I'd like to have a fallback url to send traffic to if I do not have any pool members available for my "pass through" SSL VIP. I was thinking that this might work, but I was wrong: when CLIENT_ACCEPTED { if {[active_members https_pool] < 1}{ HTTP::redirect "https://abc.123.com" } } Because I'm passing ssl through the BigIP, not terminating on the LTM, I cannot use an HTTP profile to take care of this for me. Any assistance would be appreciated.

Not sure if this going to help but have you tried using the following when CLIENTSSL_HANDSHAKE { if { [active_members https_pool] > 1 } { HTTP::redirect "https://abc.123.com" } } or when SERVERSSL_HANDSHAKE { if { [active_members https_pool] > 1 } { HTTP::redirect "https://abc.123.com" } } CB

Thanks, but it doesn't work either. I just got the "command is not valid in current event context" message when trying to enter via the GUI.

In a passthrough SSL virt will there be any handshake that the BigIP knows about?

No it won't determine that for a ssl passthrough, atleast not from the tests that I have done. The problem is that in order for this to work, ssl has to be decripted before the irules can process it for the HTTP::redirect command The only clear solution is to terminate the SSL cert on the F5. Perhaps the pro's in this forum have a better idea or approach. /CB

Hi, No choice but to make the BIGIP be a SSL termination otherwise it won't be possible i'm afraid. Sorry ^^

Forum Discussion

Lance_Simon_557

Historic F5 Account

Mar 22, 2008

Fallback URL for SSL pass through

I'd like to have a fallback url to send traffic to if I do not have any pool members available for my "pass through" SSL VIP. I was thinking that this might work, but I was wrong:

when CLIENT_ACCEPTED {

if {[active_members https_pool] < 1}{

HTTP::redirect "https://abc.123.com"

}

Because I'm passing ssl through the BigIP, not terminating on the LTM, I cannot use an HTTP profile to take care of this for me.

Any assistance would be appreciated.

12 Replies

Lance_Simon_557
Historic F5 Account
Apr 03, 2008
Very nice, Aaron.

Thanks
hoolio
Cirrostratus
Apr 03, 2008
I added this to the Codeshare. If you end up making changes to the example, can you update the Codeshare entry?

HTTPS passthrough fallback URL

http://devcentral.f5.com/wiki/default.aspx/iRules/HTTPS_passthrough_fallback_URL.html

Thanks,

Aaron