https, http redirect tips & tricks

Question

Hi,&nbsp;
&nbsp;i worked with irule and i have a small problem:&nbsp;&nbsp;
&nbsp;i have an internet website in https and http
&nbsp;my browser go to http://www.mywebip.com/&nbsp;
&nbsp;i want to follow this way:
&nbsp;if i connect to http://www.mywebip.com/ i redirect to https://www.webip.com/login&nbsp;
&nbsp;If i am on https://www.webip.com
&nbsp;i don't want to leave websecure server for all uri /login and /secure
&nbsp;but i ask another uri , i want to return in http mode.&nbsp;
&nbsp;My problem is the following:
&nbsp;when i connect http, i go to https, all is ok, but when https redirect to http,  my website send me http://www.webip.com and i have a loop.&nbsp;
&nbsp;What can i do to avoid that?&nbsp;
&nbsp;I have a irule for http and a irule for https
&nbsp;my http irule is :
&nbsp;when HTTP_REQUEST {
&nbsp;if { [HTTP::uri] equals "/" }{
&nbsp;HTTP::redirect "https://www.webip.com"}&nbsp;
&nbsp;my https irules is:
&nbsp;when HTTP_REQUEST {
&nbsp;if { [HTTP::uri] starts_with "/login" } {
&nbsp;log "blahblah"
&nbsp;} elseif { [HTTP::uri] starts_with "/secure" } {
&nbsp;log "blahblah2"
&nbsp;} else {
&nbsp;HTTP::redirect "http://www.webip.com[HTTP::uri]" }
&nbsp;}&nbsp;
&nbsp;i am sure it's very easy, but i am starting with irule...&nbsp;&nbsp;
&nbsp;Thanks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

colin_walker_12 · Answer

Well, it sounds like all you'd need to do to stop the redirect loop is add the proper check to your HTTP rule.
Assuming you only want the HTTP rule to redirect to HTTPS if they are trying to view a page inside of /secure or /login, then you'd do something like this:
when HTTP_REQUEST {
  if { [HTTP::uri] equals "/" } { 
    HTTP::redirect "https://www.webip.com/login"
  } elseif { ( [HTTP::uri] starts_with "/login") or ( [HTTP::uri] starts_with "/secure") } {
    HTTP::redirect "https://www.webip.com[HTTP::uri]"
  }
}
You'd then want to change your HTTPS rule to look something like:
when HTTP_REQUEST {
  if { [HTTP::uri] starts_with "/login" } {
    log "blahblah"
  } elseif { [HTTP::uri] starts_with "/secure" } {
    log "blahblah2"
  } elseif { ( [HTTP::uri] equals "" ) or ( [HTTP::uri] equals "/") } {
    log "blahblah3"
  } else {
    HTTP::redirect "http://www.webip.com[HTTP::uri]" 
  }
}
I think that should get you where you need to go.  The biggest change is making sure that your HTTPS rule is checking for an empty URI, and not redirecting if the URI is empty.
HTH,
-Colin

laurent_marion_ · Answer

thanks colin, i find the solution.&nbsp;

colin_walker_12 · Answer

Sure thing, I'm glad to hear we could help.&nbsp;
&nbsp;-Colin

zafer · Answer

Hello 
&nbsp;  
&nbsp; i used these irule, redirect works for http to https and https to http but i have problem with warnings 
&nbsp;  
&nbsp; when client request redirect http to https or https to http we receive alot of security warning messages, we wait only 1 warning message. What can i do for solving this problem 
&nbsp;  
&nbsp; regards 
&nbsp;  
&nbsp; zafer &nbsp;

iku_72301 · Answer

hi, berberz  
&nbsp; I had the same problem before. in my case, I checked source file onf the contents. then, I tound URL were still "http://..". when I fixed these URLs, problems get solved. if you still had this problem, try it.  
&nbsp; thnx  
&nbsp; pineda

Forum Discussion

https, http redirect tips & tricks

Recent Discussions

Application only need to access from 2 uris

In Radius auth, how to allow second attempt of token input when the first input is incorrect?

AS3 Limitations

Unable to install firmware OS and drop at 10%

Statistics ›› Analytics : HTTP : Overview

Related Content

F5 Automation with Ansible Tips and Tricks

(HTTP) Redirection via Arbitrary Host Header

HTTP To HTTPS Redirect 301

Http redirection

HTTP URI Replace/Redirect

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS