For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chuckcald_15879's avatar
chuckcald_15879
Icon for Nimbostratus rankNimbostratus
May 28, 2014

Help with Irule to redirect url port and pass POST data

Hi all. Users must use https://sso.domain.com/sp/ACS.saml2 to pass their SSO (Single Sign ON) to our SP servers. Our SP server listens on port 9031. I need the SSO POST data coming to https:...
application delivery
devops
iRules
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
May 28, 2014

sso.domain.com:9031 is a different virtual server named sso_9031 with a pool named "pool_sso_9031"

 

can you just use virtual command to forward traffic from sso.domain.com:443 to sso.domain.com:9031?

 

virtual

 

https://devcentral.f5.com/wiki/iRules.virtual.ashx

 

chuckcald_15879's avatar
chuckcald_15879
Icon for Nimbostratus rankNimbostratus
May 28, 2014
We do not want to route all traffic from sso.domain.com:443. Only traffic going to /sp/ACS.saml2. https://sso.domain.com goes to our sso.domain.com:443 virtual server and is needed for normal 443 traffic. https://sso.domain.com/sp/ACS.saml2 needs to be redirected to https://sso.domain.com:9031/sp/ACS.saml2 and sent to virtual server sso_9031 where the SP server is listening only on port 9031. I hope this clarifies more.