For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RobS's avatar
RobS
Icon for Altostratus rankAltostratus
Jan 22, 2014

HTTP to HTTPS policy injecting "/Location: https:///" into URL and breaking application

We have an application I'm load balancing with my LTMs that I was initially told would just need basic load balancing and http to https redirection. Now I find out they are running it out of Citrix s...
application delivery
citrix
design
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jan 23, 2014

Very interesting. This iRule would suggest that it's being used on multiple VIPs, because otherwise all requests on a port 80 only VIP would satisfy the "[TCP::local_port] == 80" requirement.

Just as a test, add some log statements into your HTTP-HTTPS iRule like this:

when HTTP_REQUEST {
    log local0. [HTTP::host]
    log local0. [getfield [HTTP::host] : 1]
    log local0. [HTTP::uri]
    HTTP::respond 302 Location "https://[getfield [HTTP::host] : 1][HTTP::uri]"
}