For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cjflora_192121's avatar
cjflora_192121
Icon for Nimbostratus rankNimbostratus
Aug 04, 2015

HTTPS host header rewrite

Hello,

 

I've got a host header rewrite iRule that I've created for a website that our developer team is testing. They have IIS configured to only allow a specific host name, but want to be able to test it by going to the IP address, so I put in the following host header rewrite to allow them to hit the site from the VIP and it still accept the connection.

 

when HTTP_REQUEST { HTTP::header replace Host "hostname" }

 

Now they want me to configure this to work as well on the HTTPS virtual server. Does anyone have any tips on how I can apply this to the HTTPS VIP as well? When I try to apply the iRule it says I have to apply an HTTP profile to the virtual server first. If I apply an http profile to this HTTPS virtual server I can't access the site. It just times out/resets.

 

application delivery
design
devops
iRules
LTM

1 Reply

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Aug 04, 2015

    cjflora,

     

    Are you decrypting and/or re-encrypting the SSL connection i.e. SSL Offload/SSL Bridging? If not and you don't have a Client SSL profile (at least) attached to the Virtual Server then adding a HTTP Profile will break the traffic...as it can't read the HTTP traffic.

     

    Hope this helps,

     

    N