For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

riadsanchz1970's avatar
riadsanchz1970
Icon for Nimbostratus rankNimbostratus
Apr 24, 2024
Solved

Help with URL Masking

iRule Newbie here and hopefully I am explain myself correctly. Our DevOps team requested I create a new site automate.test.mycompany.com, which will be redirected to this ansible URL/URI in our private cloud https://controller.automate.mycompany.com/#/login. In addition, they do no want the users to view controller.automate.mycompany.com/#/login in their browser.

virtual server: automate_https_vs
virtual server IP: 10.12.12.12 <----this IP is mapped in DNS to automate.test.mycompany.com
server pool name: automate_https_pool
server pool member IP and FQDN: 10.68.68.68 and controller.automate.mycompany.com <-HOST IS IN THE PRIVATE CLOUD

The VS and node are HTTPS; therefore, an HTTP profile and a client SSL profile has been configured.

Test performed:

  1. When I perform an HTTP Request via the F5 VS to https://automate.test.mycompany.com, I receive an HTTP Response 404 error from the pool member/cloud host 10.68.68.68.
  2. When I perform an HTTP Request directly to the cloud host by typing in the browser https://10.68.68.68  I also receive the same an HTTP Response 404 error.
  3. When I perform an HTTP Request directly to the host URL https://controller.automate.mycompany.com I receive an HTTP response with the correct URL/URI path: https://controller.automate.mycompany.com/#/login.
  4. Finally, I created a redirect iRule which redirects correctly, but I should not view https://controller.automate.mycompany.com/#/login when receiving the HTTP Response from the server. Since, the F5 is SSL bridging (encrypt/decrypt) the connection can we manipulate the HTTP response and change or rewrite the server side response? If so, I would appreciate your help.

when HTTP_REQUEST {  

switch [string tolower [HTTP::host]] {

automation.test.mycompany.com { HTTP::redirect "https://controller.automate.mycompany.com" }

}

}

Thanks,

Maria