For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dimka___104021's avatar
dimka___104021
Icon for Nimbostratus rankNimbostratus
Jun 15, 2006

http redirect to https

Hi,     I have set up VS with ssl on port 441. If client accesses http://192.168.3.3:441/ how can i redirect him to SSL VS https://192.168.3.3:441/ ?     tia,
application delivery
dev
devops
iRules
Deb_Allen_18's avatar
Deb_Allen_18
Historic F5 Account
Jun 15, 2006
Headers and data alike are encrypted over an HTTPS connection, so the SSL handshake has to complete before any higher-level headers or data is exchanged.

 

 

If the client fails to send a CLIENT-HELLO (because it thinks it's communicating over HTTP), the handshake fails, and the connection is reset.

 

 

(It's the same chicken / egg scenario under which you can't dynamically pick a specific cert that matches the Host: header -- The header is not seen until after the handshake, which requires the cert...)