For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SSHSSH_97332's avatar
SSHSSH_97332
Icon for Nimbostratus rankNimbostratus
Oct 16, 2012

HTTP Redirection from Web Server breaks SSL Termination

I have VS on port 443 , it has SSL profile to do SSL termination & forward to pool ( on port 80 ) .   so communication between user & F5 is HTTPS , between F5 & Web Server is HTTP .   most UR...
config
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Oct 16, 2012

Can you confirm that the user gets a redirect (a HTTP 301 or 302)? If so you can modify the HTTP Profile assigned to the VS and enable Redirect Rewrite and the F5 will indeed rewrite the response to HTTPS, but only for HTTP redirects.

 

 

If not you have four options;

 

 

1) Change the application code to https://

 

2) Make the links relative not absolute (change the app code again)

 

3) Use a stream profile to have the F5 rewrite all http:// links in server responses (including in payload)

 

4) Configure a port 80 VS that will redirect any http:// requests to https://

 

Sorry Nathan ;-)