Forum Discussion

Nate_Goodwyn_10's avatar
Nate_Goodwyn_10
Icon for Nimbostratus rankNimbostratus
May 12, 2006

Https redirects

I have a very simple configuration. I redirect http traffic without a problem by entering a redirection page in the http profile / assign this profile to my http vurtual server and marking the nodes down when I need to.

 

 

I want to do the same thing with https but this does not work. Is there a method of doing the same thing with https. Nothing fancy. I just want people to know that the site is down and to redirect them to my outage page. Thank you for all your help
application delivery
dev
devops
iRules
  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    May 12, 2006
    Not an iRules question, but maybe I can point you in the right direction:

     

     

    It sounds like you are talking about the http profile feature "fallback host".

     

     

    If you are terminating SSL on the BIG-IP, you can apply the same http profile to both HTTP and HTTPS virtual servers.

     

     

    If you need end to end encryption, you'll need to configure clientssl and serverssl in addition to the http profile.

     

     

    HTH

     

    /deb

     

  • Nate_Goodwyn_10's avatar
    Nate_Goodwyn_10
    Icon for Nimbostratus rankNimbostratus
    May 14, 2006
    Thank you but I have tried using the fallback host and it does not work for my https but does work for my http. FYI, the https (server based cookies are server based. It is not controlled by bigIP. SSL certs are generated at the servers not BIGIP. Users can hit my site by http:/website/xxxx or https://website/xxxx. When I create a new profile bases on the http profile (keeping the http profile in tact with no changes) and calling this new profile https and assigning this https profile to my https vurtual server everything fails. This is why I was thinking that a irule would correct the problem.
  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    May 15, 2006
    If you are not terminating SSL on the BIG-IP, we can't influence or participate at all in the conversation above L4.

     

     

    As I mentioned, you'd need to terminate SSL on the BIG-IP and re-encrypt to gain the functionality you're requesting.

     

     

    This section of the LTM manual describes the clientssl & serverssl profile:

     

    http://tech.f5.com/home/bigip-next/manuals/bigip9_2/bigip9_2config/BIG_IP9_2ConfigGuide-08-1.htmlwp1252752

     

     

    Once you have a clientssl profile on your https virtual server, the fallback host option should work for you.

     

     

    HTH

     

    /deb