For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gajji's avatar
Gajji
Icon for Cirrostratus rankCirrostratus
Feb 13, 2020

https to https irule for redirection

Is it possible to create an Irule which can re-direct as below https://url to https://url/url   When creating an irule on LB i have seen below default rule.. but not for https_request somet...
application delivery
BIG-IP
iRules
Margaret212's avatar
Margaret212
Icon for Nimbostratus rankNimbostratus
Jun 03, 2023

 

To redirect traffic from HTTP to HTTPS using an iRule in an F5 BIG-IP load balancer, you can create a simple iRule that performs the redirection. Here's an example of how the iRule can be configured:

 

tclCopy code
when HTTP_REQUEST { if { ![HTTP::is-secure] } { HTTP::respond 301 Location "https://[HTTP::host][HTTP::uri]" } }
 

In this iRule, the HTTP_REQUEST event is triggered when an HTTP request is received. The if statement checks if the request is not already secure (i.e., not HTTPS). If it's not secure, the HTTP::respond command is used to issue a 301 (Permanent Redirect) response with the Location header set to the corresponding HTTPS URL.

To apply this iRule to your virtual server, follow these steps:

  1. Access the BIG-IP configuration utility.
  2. Navigate to Local Traffic > Virtual Servers and select the appropriate virtual server.
  3. In the Configuration section, locate the iRules field and click the Add button.
  4. Enter the name of the iRule you created (e.g., http-to-https) and click Add.
  5. Save the changes and test the configuration.

    Make sure to replace [HTTP::host] with the appropriate variable that represents the host name or domain in your environment.

    This iRule will redirect any incoming HTTP requests to the corresponding HTTPS URL. It's essential to have the necessary SSL/TLS configuration in place to handle the incoming HTTPS requests on the virtual server.

    Remember to thoroughly test the iRule in your specific environment before applying it to production systems. MyPennMedicine