Forum Discussion
HTTP to HTTPS iRule not working
I could be mistaken, but I don't believe you're trying to pass traffic to a VIP through another VIP. What I understood is that you have two VIPs (80 and 443), and that you want requests to the 80 VIP to get redirected to the 443 VIP. If that's true, then the configuration is pretty straight forward:
-
HTTP VIP which simply has a generic HTTP profile and the iRule (no pool necessary).
-
HTTPS VIP which listens on 443 and sends traffic to a pool. If the pool members are not listening on HTTPS, then you need a client SSL profile to offload the client side SSL. If you want to decrypt and re-encrypt, then you need a client and server SSL profile applied to this VIP. If you have any iRules on this VIP that inspect HTTP traffic, then you need an HTTP profile. If you're not certain that the pool members will reliably route back through the LTM, then you should probably also apply a SNAT profile (Automap will do).
With this configured, start a tcpdump capture on the client side interface of the LTM and observe the client communicating with the port 80 VIP first, and then the 443 VIP. If that looks good, start a tcpdump capture on the pool member side of the LTM and observe the client's request flowing to a pool member, and the response flowing back through the LTM.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com