For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
Sep 21, 2008

https connections become http - how to secure it?

I have SSL termination configured for a virtual server. The backend connection to the server is a http (clear text) connection.     In my case, the server is perforimg an http 300-series re...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Sep 22, 2008
Hi Meena,

 

 

You've done some nice research...

 

 

Can you use a browser plugin like Fiddler for IE or LiveHttpHeaders (and viewing the page source) for Firefox to check how the client is getting directed to make a request via HTTP? It might be a 30x redirect or it could be content within the payload.

 

 

If it's a redirect in the response headers using rewrite redirects or an iRule. If that's not working, the HTTP reference might be in the payload. If that's the case, you could rewrite the HTTP reference to HTTPS using a stream profile and iRule. Take a look at the STREAM::expression wiki page (Click here) for examples.

 

 

Aaron