For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kridsana_52318's avatar
kridsana_52318
Icon for Nimbostratus rankNimbostratus
Jan 15, 2016

Full proxy not working when try to use SSL offload + HTTP-to-HTTPS redirect

Hi Everyone   I've some question about Full proxy with SSL offload.   My scenario is I've web application which run on port 80. And then I try to make it to HTTPS for all path by using F5 LTM p...
application delivery
full proxy
LTM
ssl offload
kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Jan 20, 2016

Hi Kai

 

Thank you for your answer.

 

I've some question about this problem which still can't solve when perform irule HTTPS-redirect.

 

1.) From this condition, How can it can't fix with redirect? when client request HTTP form base post, it still redirect to HTTP normally, didn't it? -- Embeded HTML FORMS with based POST-backs. (can't be fixed with redirects)

 

2.) From these condition, Application server (server-side) will still receive HTTP traffic (just like when not perform SSL-offload). So how this condition may break application? -- Validate the HTTP referer so that the previous request was comming from a specific sub-site (may break your application) -- Trigger JScript to read and postback the location bar. (may break your application)

 

Thank you very much