Forum Discussion

Alexey_Beketov's avatar
Alexey_Beketov
Icon for Nimbostratus rankNimbostratus
Nov 11, 2021

handle ssl and non ssl on the same virtual server and port

Hi!

We have new(ssl) and legacy(non ssl) client applications, both need to connect to the same virtual server and the same 443 port.

Backend server uses plain http.

So we need LTM to accept both ssl / non ssl connections from clients on the same 443 port of the same virtual server and forward them to the backend application.

We tried irules with no success.

Is there any chance we can manage this situation on the LTM side?

 

We have BIG-IP 14.1.2.3 Build 0.0.5 Point Release 3

application delivery
BIG-IP
iRules
  • xuwen's avatar
    xuwen
    Icon for Cumulonimbus rankCumulonimbus
    Nov 12, 2021

    Local Traffic  ››  Profiles : SSL : Client >>Configuration(Advanced)>>Non-SSL Connections(enable),

    use iRules to traffic non ssl to redirect https:

    when CLIENTSSL_CLIENTHELLO {

    set need_ssl 1

    }

    when HTTP_REQUEST {

    if { ![info exists need_ssl] } {

    HTTP::redirect "https://[HTTP::host][HTTP::uri]"

    }

    }

     

  • Fallout1984's avatar
    Fallout1984
    Icon for Cirrocumulus rankCirrocumulus
    Nov 11, 2021

    How were the irules configured? Basically, what were they being told to do?

     

    If the incoming traffic's port 80 (non-SSL) and it can't be redirected to 443, then a port 80 vserver will be needed. So, you're going to end up with two vservers; one using port 80, one using port 443.