For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

26 Replies

  • Nominally easiest and recommended method is via the rewrite profile... (Local Traffic / Profile / Services).

     

    Failing that there is always the ProxyPass irule: https://devcentral.f5.com/codeshare/proxypass-v10-v11.

     

    Failing that you could do a [HTTP::path] extract regex and set, with an associated stream profile.

     

    Try the rewrite profile first, it's really handy.

     

    Sproggg

     

  • Hi,

     

    You can try using a rewrite profile so you will be able to specify the client side and server side uri

     

    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      Guys, thank-you for quick reply as I needed. You meant to say Local Traffic > Profiles > Services > HTTP ? I am not able to see there the client side and server side URI. Please advise. Thank-you,
    • Yann_Desmarest's avatar
      Yann_Desmarest
      Icon for Cirrus rankCirrus
      No, I'm talking about rewrite profiles. You can also use them with APM
  • Hi,

     

    You can try using a rewrite profile so you will be able to specify the client side and server side uri

     

    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      Guys, thank-you for quick reply as I needed. You meant to say Local Traffic > Profiles > Services > HTTP ? I am not able to see there the client side and server side URI. Please advise. Thank-you,
  • Guys, Thank-you for quick reply as I needed.

     

    You meant to say Local Traffic > Profiles > Services > HTTP ?

     

    I am not able to see there the client side and server side URI. Please advise. Thank-you,

     

    • Yann_Desmarest's avatar
      Yann_Desmarest
      Icon for Cirrus rankCirrus
      It's really a rewrite profile that you need to configure. You have to setup a rewrite-uri-translation type
    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      What should I use in the Rewrite ?. 1.- Ryle type as both, or request only ?. 2.- What should I use in the Client and Server URI ?.
    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      Thanks for all your help. Now it is working as I can see the login page.
    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      However now I am getting 404 after login for /abc/my.policy. It appears the rewriting is adding /abc/ to the /ma.policy. How can I get that fixed?.
    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      It works, the rewrite permits me see now the logon page. Now I am getting 404 /abc/my.policy. How can I address that problem now?. Thanks as ever.
    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      Thanks for all your help. Now it is working as I can see the login page.
    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      However now I am getting 404 after login for /abc/my.policy. It appears the rewriting is adding /abc/ to the /ma.policy. How can I get that fixed?.
    • Edouard_Zorrill's avatar
      Edouard_Zorrill
      Icon for Nimbostratus rankNimbostratus
      It works, the rewrite permits me see now the logon page. Now I am getting 404 /abc/my.policy. How can I address that problem now?. Thanks as ever.
  • Hi,

    In you case, the rewrite engine take place after The user has been authenticated. So one possible architecture is to use VIP targeting VIP. The access profile is on the internal VS and the rewrite profile on the external VS.

    on the external VS, you just add the following irule :

    when CLIENT_ACCEPTED {
        virtual internal_vs
    }