For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

newbee_77933's avatar
newbee_77933
Icon for Nimbostratus rankNimbostratus
Jan 12, 2010

http to https redirects

Hi,     i am new to this and would appreciate some advice. We are moving one of our customers from another load balancer to the F5 LTM running. The customer currently uses 3 VSs a catch all...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 13, 2010
Hi,

 

 

You mentioned that there are three VIPs on port 0, 443 and 8080, but then said there was a port 80 VIP. Can you clarify which ports are configured? In the simplest configuration for HTTP and HTTPS, you'd have a port 80 VIP and a port 443 VIP. The redirect from HTTP to HTTPS would be set on the port 80 VIP. The redirection could be done with an HTTP class or an iRule like the one you listed. Either redirect option would require an HTTP profile on the port 80 VIP.

 

 

If you want to do HTTP inspection or modification on the 443 VIP, you'd need to import the server cert/key, configure a client SSL profile with the cert/key and then add it and an HTTP profile to the 443 VIP.

 

 

Overall, it should be a fairly straight forward process. You shouldn't need the port 0 or port 8080 VIPs if you're handling just HTTP and HTTPS traffic.

 

 

Aaron