Forum Discussion

Alexey_Beketov's avatar
Alexey_Beketov
Icon for Nimbostratus rankNimbostratus
Nov 11, 2021

handle ssl and non ssl on the same virtual server and port

Hi! We have new(ssl) and legacy(non ssl) client applications, both need to connect to the same virtual server and the same 443 port. Backend server uses plain http. So we need LTM to accept both s...
application delivery
BIG-IP
iRules
xuwen's avatar
xuwen
Icon for Cumulonimbus rankCumulonimbus
Nov 12, 2021

Local Traffic  ››  Profiles : SSL : Client >>Configuration(Advanced)>>Non-SSL Connections(enable),

use iRules to traffic non ssl to redirect https:

when CLIENTSSL_CLIENTHELLO {

set need_ssl 1

}

when HTTP_REQUEST {

if { ![info exists need_ssl] } {

HTTP::redirect "https://[HTTP::host][HTTP::uri]"

}

}