For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jim_24689's avatar
Jim_24689
Icon for Nimbostratus rankNimbostratus
Apr 05, 2011

HTTPS pass thru config needs maintenance page

Hello -     LTM 9.3.1   We have a configuration where clients via browsers connect to a VIP using https. The https is not terminated but passed through to the back-end servers. I've been try...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 05, 2011
Hi Jim,

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/HTTPS_passthrough_fallback_URL.html

 

 

This iRule allows an administrator to pass HTTPS traffic through the BIG-IP wtihout decrypting it. If there are no nodes available in the pool, the rule will use a client SSL profile and HTTP profile to decrypt the HTTPS and issue a redirect to a maintenance page.

 

 

The iRule depends on having the SSL certificate and key imported to the BIG-IP, configured in a client SSL profile and attached to the virtual server. An HTTP profile must also be associated with the virtual server. The virtual server and pool would typically be configured for HTTPS on port 443.

 

 

Aaron