For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

willetzktysthk_'s avatar
willetzktysthk_
Icon for Nimbostratus rankNimbostratus
Sep 13, 2017

HTTPs rewrite

Hi   We have 2 apache web servers configured for http only. We have put our f5 big loadbalancer in front doing ssl with the standard redirect irule on a second VS. These 2 rules work fine apart fr...
application delivery
BIG-IP
willetzktysthk_'s avatar
willetzktysthk_
Icon for Nimbostratus rankNimbostratus
Sep 15, 2017

Thanks for the response

I added the deafult stream profile and created the follwoing irule for the HTPS vs

when HTTP_REQUEST { tell server not to compress response HTTP::header remove Accept-Encoding

 disable STREAM for request flow
STREAM::disable

} when HTTP_RESPONSE { catch and replace redirect headers if { [HTTP::header exists Location] } { HTTP::header replace Location [string map {"; ";} [HTTP::header Location]] }

 only look at text data
if { [HTTP::header Content-Type] contains "text" } {

     create a STREAM expression to replace any http:// with https://
    STREAM::expression [list {@http://@https://@} {@:80@:443@}]

     enable STREAM
    STREAM::enable
}

}

this has fixed the http https issuses but now it has broken the authentication. It is using apache ntlm and i am just getting 401 and 403 errors getting when the java asks for any xhr content