How to redirect Https to Https respons ?

Question

Hii Everyone,I have a problem with our client application Web.I have VS port 443 (using SSL) and pool member 80. (IP VS 192.168.x.x:443 --&gt; pool member 10.45.x.x:80 )When client access port 443 at homepage still 443, but when user login to the homepage, its redirected from 443 to http (80). When I dump, the response from server is true (respons 443 TLS) because F5 respons must be 443.&nbsp;The problem is why the user after login to the homepage redirected to HTTP, not HTTPS ?We can't using this step:1. we cannot change the pool member port 80 to member 443 because port 80 still use for internal application, so we cannot create redirected VS http to https.2. Server can be change from 80 to port 443 because&nbsp;have not received permission from the client management.&nbsp;So the question is :Any irules to change the respons server to https when user login to the homepage ???Thankyou.

leslie_hubertus · Answer

Hi&nbsp;Mohamed_Ahmed_Kansoh&nbsp; - I think you meant to past a KB article, but it didn't come through for some reason. Could you please try linking it again?

mohamed_ahmed_kansoh · Answer

Hi&nbsp;Satriaji&nbsp;,&nbsp;Till now I do not see the issue exists on servers , also it is not doable for me to redirect server Responses to https.&nbsp;&gt;If you use client ssl , your traffic should return to clients Encrypted.&nbsp;&gt; Traffic should be returned from server to F5 Decrypted due to non existance of server ssl profile.&gt; if you were redirected after login , maybe you were redirected to another virtual serer using port 80.&nbsp;&gt; Are there any changes in your "hostname" After Loging directly , maybe the homepage redirects you to another domain after loging in.&nbsp;so I susbect that your Requests are un trusted after loging in against this Client ssl not server.&nbsp;I think the issue is still wiith Client ssl&nbsp;you can clarify more if you need , I will follow up

satriaji · Answer

Dear Mohamed,Here the config&nbsp;Server Farm===========IP VS = 192.168.x.x port 443 (without use SSL profile at clientside profile)Pool member = 10.45.x.xx port 443 ( its use to IP VS DMZ )&nbsp;DMZ======IP VS = 10.45.x.x port 443 (its used to IP pool member Serverfarm) using SSL client side profilePool member= 10.43.x.x port 80 (server http)&nbsp;When the user access&nbsp;https://abcd/otcs/login&nbsp;the homepages still https, but after login using user name and password, the homepage :&nbsp;http://abcd/otcs/login . They want to still https when login.&nbsp;thankyou&nbsp;&nbsp;

mohamed_ahmed_kansoh · Answer

Satriaji&nbsp; , Alright then.&nbsp;it’s a strange behavior to me.&nbsp;ِAnyway , I would Recommend to create new http virtual server , and assign a redirection iRule from http to https to force redirection of https always in path.&nbsp;&gt; when login and redirected to non secure http , you should be redirected again by the( new created virtual server + assigned Redirection iRule " http ــــ&gt; https " use the default one )&nbsp;&gt; This below Redirection irule for the " new http virtual server "&nbsp;&nbsp; when HTTP_REQUEST {
       HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]
    }&nbsp;&nbsp;Try it , I hope it works with you.&nbsp;

satriaji · Answer

Dear Mohammed,The VS port 80 have been used for internal application, so we cann't create IP VS port 80. (cannot using step 1 to create VS port 80 then assign the irules_sys_redirect_https) because that IP VS &amp; port 80 have been used.&nbsp;So when the client access https://abc.com&nbsp;--&gt; homepage become http://abc.com&nbsp;, so we must add or manually add "https://" in the browser so the app can be open.&nbsp;Can we use this step on article&nbsp;https://support.f5.com/csp/article/K14775&nbsp;?

Forum Discussion

How to redirect Https to Https respons ?

Recent Discussions

Join devcentral

Big-iq 8.2 questions

Cookie Persistence configured on VS but no logs

How to backup automation Which BIG IP already integration to BIG IQ CM

[APM] - Error: failed to reset strict operations; disconnecting from mcpd

Related Content

Universal HTTP host redirect

Replace HTTP refresh with HTTP Redirect

https to https redirection

Rewrite HTTP redirect 301 to 302

Simple HTTP::redirect iRule results in a reset