Forum Discussion

Ritchie-T's avatar
Ritchie-T
Icon for Nimbostratus rankNimbostratus
Sep 16, 2020
Solved

http to https redirect on single VIP using a port list consisting of port 80 and 443

Hi there,   In the past I have had 2 virtual servers when wanting to redirect from HTTP to HTTPS. One on port 80 with the built in "_sys_https_redirect" irule, then another on port 443 for the redi...
application delivery
BIG-IP
iRules
  • JRahm's avatar
    JRahm
    Sep 16, 2020

    Do you have Non-SSL Connections enabled in your clientSSL profile?

Ritchie-T's avatar
Ritchie-T
Icon for Nimbostratus rankNimbostratus
Sep 17, 2020

Excellent. Jason!

 

I did not know that was an option. With Non-SSL Connections enabled in the client SSL profile I do not need to disable the SSL for port 80 requests anymore under "when CLIENT_ACCEPTED". This leaves me free to process the irule using only "when HTTP_REQUEST". I had to tweak the irule slightly from my original post, but the below works a charm 👍

 

when HTTP_REQUEST {

  if { [TCP::local_port] == 80 } {

  if {[HTTP::has_responded]}{return}

    HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]

    event disable

  }

}