Forum Discussion

slesh_219299's avatar
slesh_219299
Icon for Cirrus rankCirrus
Dec 02, 2015

http to https redirection issue .

Hello guys I got fast question probably I have 2 vips : https with pool members : 443 http + i rule but someone attached there pool with members on port 80   ........................   when ...
application delivery
BIG-IP
http to https
iRules
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Dec 02, 2015

Are you saying you've got 1 HTTPs vip with pool members listening on port 443, and 1 HTTP vip with a redirect irule and a pool with pool members listening on port 80? If so then the pool attached to the HTTP vip should not matter at all, a connection to this vip will simply get redirect to the https vip.

 

I'd concentrate on the https vip. Are you offloading the SSL connection i.e. do you have a client ssl profile? Are you re-encrypting the SSL connection i.e. do you have a server ssl profile? If your pool members are on 443 then you either you need to both decrypt/re-encrypt or do neither. Also, if you do not have a clientssl profile then i would not add a http profile to the https vip - this does cause issues as the ltm can't see the http traffic as its encrypted.

 

Hope this helps,

 

N