Forum Discussion
Chris_Stierle_1
Nimbostratus
Nov 30, 2005https://www.a.com/ to https://www.b.com redirect
Is there any way to use an irule to redirect https requests from one url to another in the case of a failure? Added to this is the fact that my ssl certs are on the servers and not on the F5s. I curre...
Martin_Machacek
Dec 05, 2005Historic F5 Account
Chris,
if all that you want to achieve is what you've described in your last post (which is a much simpler problem than what you've described in your first post), then the solution is as follows:
- put copy of your private key and certificate for www.a.com on the
BIG-IP,
- configure SSL proxy for IP address to which www.a.com resolves,
- configure the proxy to refer to a virtual server,
- configure the virtual server to use a rule with single "redirect to"
statement.
The configuration may look like this:
rule www.a.com-redirect {
redirect to "https://www.b.com"
}
virtual 127.1.1.1:80 {
use rule www.a.com-redirect
}
proxy www.a.com:https {
target virtual 127.1.1.1:80
clientssl enable
clientssl key www.a.com.key
clientssl cert www.a.com.crt
}
Notes:
- it is actually better to put IP address as virtual and proxy names
than DNS names, because if DNS resolutions are not available at the
time the machine boots and there is no entry for www.a.com in
/etc/hosts the configuration load will fail,
- you can use unofficial self-signed certificate for the proxy, if you
don't mind that customers will get browser warnings about untrusted
and unverifiable certificate when accessing https://www.a.com.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects