Forum Discussion

Suresh_Gurugubi's avatar
Suresh_Gurugubi
Icon for Nimbostratus rankNimbostratus
Nov 03, 2018

http and https VIP with non-standard port

Hello,

 

we have existing VIP with 10.10.10.10:9000, this is simple http VIP.

 

Requirement: Now we need to convert this VIP to https and re-direct all http traffic to https, so it won't break the existing client flows.

 

challenges: Generally we create 2 VIP with http/80 and https/443 and add re-direct profile for http VIP, so both http and https works for clients. But here VIP has port binding of 9000. So by adding client-SSL profile, it break http flows. And I cannot create new http/9000 VIP to have re-direct.

 

So, I need expert advise. Please help me. Thanks in advance!

 

I'm thinking of adding client-SSL profile, so existing VIP converts to https. And then create iRule specific to this VIP IP and force http traffic to https. Please advise!

 

Thanks, Suresh