Forum Discussion
NimbostratusHTTP profile to rewrite URL
Hi,
I have followed the following article - https://support.f5.com/kb/en-us/solutions/public/14000/700/sol14775.html to configured an HTTP profile to rewrite redirect requests sent from our internal server.
We currently have a Virtual Server configured to offload SSL connections from the backend. The internal server is currently sending an HTTP 302 redirect to an HTTP website. The HTTP profile should be capable of rewriting that responce to HTTPS prior to forwarding it to the Client.
However this seems to be failing since we the client is being returned the URL as HTTP.
Our system is running version 11.5.1
8 Replies
- nitass
Employee
However this seems to be failing since we the client is being returned the URL as HTTP.
http may be embedded in message body. if yes, you may try stream profile to rewrite http to https.
have you used http analyzer tool? it may be helpful.
HttpFox
https://addons.mozilla.org/en-US/firefox/addon/httpfox/
Wolf46_144992Hi Nitass, As a matter of fact I have used both HTTP Fox and also Fiddler to try to get an idea on what might be happening. It seems that we are getting redirected with a 302 message within the HTTP header itself. I have also tried using the Stream Profile using the Target and the following syntax: @http://myold.url.com@https://mynew.url.com@
nitass_89166Noctilucent
However this seems to be failing since we the client is being returned the URL as HTTP.
http may be embedded in message body. if yes, you may try stream profile to rewrite http to https.
have you used http analyzer tool? it may be helpful.
HttpFox
https://addons.mozilla.org/en-US/firefox/addon/httpfox/- Wolf46_144992Hi Nitass, As a matter of fact I have used both HTTP Fox and also Fiddler to try to get an idea on what might be happening. It seems that we are getting redirected with a 302 message within the HTTP header itself. I have also tried using the Stream Profile using the Target and the following syntax: @http://myold.url.com@https://mynew.url.com@
- nitass
have you tried tcpdump/ssldump? just wondering if the problem is in header or message body.
tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x or host y.y.y.y -v x.x.x.x is virtual server ip y.y.y.y is pool member ip- Wolf46_144992Hi Nitass, Ok so found out that the actual 302 was not originating from the internal server but from the LTM itself as we have an irule listening on the same IP address on port 80 redirecting requests to 443. I have done a TCP dump on both client and internal server and noticed that we are getting an HTTP 200. However this web service used to work fine when published over our ISA server. I believe that the F5 handles the traffic in a different manner.
- nitass_89166
have you tried tcpdump/ssldump? just wondering if the problem is in header or message body.
tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x or host y.y.y.y -v x.x.x.x is virtual server ip y.y.y.y is pool member ip- Wolf46_144992Hi Nitass, Ok so found out that the actual 302 was not originating from the internal server but from the LTM itself as we have an irule listening on the same IP address on port 80 redirecting requests to 443. I have done a TCP dump on both client and internal server and noticed that we are getting an HTTP 200. However this web service used to work fine when published over our ISA server. I believe that the F5 handles the traffic in a different manner.
