Forum Discussion

jgrohol_43248's avatar
jgrohol_43248
Icon for Nimbostratus rankNimbostratus
Dec 14, 2011

HTTPS site with HTTP reference inside code

We have two VS's created for this site voicemail.domain.com. The first one is listening on TCP 80 and has an HTTP to HTTPS redirect on it. The second VS is for the HTTPS itself and is tied to the pool. The HTTPS also has an irule on it to redirect the top level URL to something deeper, ie https://voicemail.domain.com/inbox/index.html.

 

 

Everything works as configured except one item. On the site on one of the pages is a built-in AJAX/XML gadget that runs. I can see using packet capture and fiddler that the gadget is being called via a full FQDN URL of http://voicemail.domain.com/.... It is using a plain HTTP url inside of an HTTPS page. Going through the F5, the gadget does not get displayed. We receive an HTTP 500. This works if you go to the member server directly.

 

 

 

I'm thinking that the plain HTTP url is hitting the HTTP VS I have configured and trying to do the HTTP to HTTPS redirection. I disabled and took away the HTTP VS and made the HTTPS VS listening on all tcp ports. Still no go.

 

 

 

Anyone else run into this type of issue or any ideas of how I can get around it?

 

 

 

F5 3900 ver. 10.2.2

 

 

 

Jim

 

 

 

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    You could use a stream config to rewrite the URL in the AJAX/XML from http:// to https://

     

     

    The ProxyPass iRule has a good example of how to create a stream on the fly for particular URI's.

     

     

    H
  • can see using packet capture and fiddler that the gadget is being called via a full FQDN URL of http://voicemail.domain.com/.... It is using a plain HTTP url inside of an HTTPS page.i guess this http request hits HTTP VS and get redirected to HTTPS VS but it might be affected by redirection irule on HTTPS VS.

     

     

    just my 2 cents.