Forum Discussion
Al_3585
Nimbostratus
NimbostratusHTTPS / HTTP Issues
I think I have found my problem but now I need help to correct the problem with iRules, I hope.
Scenerio: Client HTTPS (443) --> F5 (VS --> SSL Off-load --> HTTP (8080) --> Server
A request is made to the server as https but when selecting a page link, the response back to the client is shown as http and the connection fails. The problem can be resovled by adding the "s" back in the URL and now the link functions. What can be done to prevent this?
Brian_69413Do you mean to say that the server sends back a 301 or 302 response with http://... specified? You can either get the server to correct its responses, create a second vip for port 80 that uses the https_redirect irule, or rewrite the responses with an iRule(not recommended)
Al_3585I think we are close but just to make sure, you are correct the client does see an http:// link but why is it not https if the F5 is doing SSL off-loading? If I understand correctly the response going back to the client should be SSL.- Brian_69413I believe the response is SSL, but if the SSL response contains an HTTP redirect to a non-SSL site, your browser is going to honor it.
- Kevin_Stewart
Employee
Try setting the redirect rewrite option in the HTTP profile. All or Matching should suffice.
This option catches redirects and automatically corrects for the "reverse proxy" mismatch. - Al_3585Got it working but had to rewrite web server xml code. Thanks to all!
hooleylistCirrostratus
Fixing the app is generally the ideal solution :)
Aaron
