Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

SSHSSH_97332's avatar
SSHSSH_97332
Icon for Nimbostratus rankNimbostratus
13 years ago

HTTP Redirection from Web Server breaks SSL Termination

I have VS on port 443 , it has SSL profile to do SSL termination & forward to pool ( on port 80 ) .

 

so communication between user & F5 is HTTPS , between F5 & Web Server is HTTP .

 

most URLs is working fine , but for some url i can see that when i click on it i get " page cannot be displayed " & that the browser used HTTP not HTTPS .

 

i checked web server code & found statements redirecting to HTTP for these URLs , like the below :

 

getURLHome: function() {

 

return "http://erod.siucex.com/web/signin";

 

So , form above it redirects users to HTTP , which breaks HTTPS Termination .

 

shall i ask webserver admin to cahnge that to "https" , but he should only understand HTTP not HTTPS ???

 

i was expecting that BIGPIP will change it automatically to HTTPS before forwarding to nuser

 

 

5 Replies

No RepliesBe the first to reply