For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dassy_165659's avatar
Dassy_165659
Icon for Nimbostratus rankNimbostratus
Oct 11, 2017

Https to https redirection

Hi All,

 

I am having trouble to rewrite an iRule in F5 for HTTPS to HTTPS. Here is my current iRULE(see below) and i want to redirect it as https://xyz.com.au to https://xyz.com .We have certificate installed for *.xyz.com on the F5. Can anyone please help me here

 

Current iRule

 

when HTTP_REQUEST { if { [string tolower [HTTP::host]] equals "; } { HTTP::respond 301 Location "; } }

 

application delivery
BIG-IP
iRules

1 Reply

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Oct 12, 2017

    Hi, the code may work (I removed the semi-colon in if condition)

     

    when HTTP_REQUEST { 
    if { [string tolower [HTTP::host]] equals "www.xyz.com.au" } {     
        HTTP::respond 301 Location "https://www.xyz.com";         
    }     
}

    But as ssl is negotiated before the http request is sent by the browser, you will have an ssl error due to ssl mismatch before redirect.

     

    You must have a certificate for to prevent ssl error. You can then configure SNI to send right certificate based on server name extension.