For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ashley_Penney_5's avatar
Ashley_Penney_5
Icon for Nimbostratus rankNimbostratus
Oct 09, 2008

http/https redirection based on URI

Hi,     I'm crafting two new irules, with the intention of keeping people https if the uri contains /secure/, and http if not. I know this is probably a terrible idea, but it's what I've b...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 09, 2008
So what about not rewriting HTTPS requests if the path contains /secure/ or the Referer header matches https://*/secure/*? As you note, it looks like it's not an issue of rewriting the response content--just avoiding redirecting an HTTPS request if it was generated from an HTTPS page.

 

 

Aaron