I have mulitple sites where i want my LAN users should not to redirected to https when they use url with http. but when any internet users use http://abc.com than it should redirect to https://abc.com Can i use the below irule for this. when HTTP_REQUEST { if {[HTTP::host] equals "abc.com"} { HTTP::redirect "https://abc.com[HTTP::uri]" } } Now i want to do for multiple sites in same irule can i use another if statement?

This irule will work. You may change it to fit for your need of multiple sites : when HTTP_REQUEST { switch -glob [HTTP::host] { "hostname1" { HTTP::redirect "https://hostname1[HTTP::uri] } "hostname1" { HTTP::redirect "https://hostname1[HTTP::uri] } "hostname2" { HTTP::redirect "https://hostname2[HTTP::uri] } default { } } } If this is just for redirecting http to https, you can just use this irule : when HTTP_REQUEST { HTTP::redirect "https://[HTTP::host][HTTP::uri]" }

I have mulitple sites where i want my LAN users should not to redirected to https when they use url with http. but when any internet users use http://abc.com than it should redirect to https://abc.com you may use IP::addr to check whether it is lan user traffic and then redirect if not. e.g. config [root@ve11a:Standby:In Sync] config tmsh list ltm virtual bar ltm virtual bar { destination 172.28.24.10:80 ip-protocol tcp mask 255.255.255.255 pool foo profiles { http { } tcp { } } rules { qux } source 0.0.0.0/0 source-address-translation { type automap } vs-index 65 } [root@ve11a:Standby:In Sync] config tmsh list ltm rule qux ltm rule qux { when HTTP_REQUEST { if { !([IP::addr [IP::client_addr] equals 172.28.24.0/24]) } { HTTP::redirect "https://[HTTP::host][HTTP::uri]" } } } test1 (client ip is 172.28.24.11) [root@ve11a:Standby:In Sync] config curl -I http://172.28.24.10/ HTTP/1.1 200 OK Date: Wed, 20 Aug 2014 07:08:10 GMT Server: Apache/2.2.3 (CentOS) Last-Modified: Sun, 09 Feb 2014 08:39:51 GMT ETag: "41879c-59-2a9c23c0" Accept-Ranges: bytes Content-Length: 89 Content-Type: text/html; charset=UTF-8 test2 (client ip is 172.28.77.29) curl -I http://172.28.24.10/ HTTP/1.0 302 Found Location: https://172.28.24.10/ Server: BigIP Connection: Keep-Alive Content-Length: 0

Thank you that was really helpful. I need more help. in our setup we have sites which are accessed by internal users as well as internet users via http and https. so we have created 4 VS (2 internal VS, one for http and one for https for internal users) and (2 for internet users 1 for http and one for https). our requirement is any lan user access sites via http than it should be http if lan users type https than it should redirect to http. similarly if any internet users access sites via http than it should redirect to https. this is done by 1 irule one for http to https redirection. when RULE_INIT { set static::bsint "internet.abc.com" set static::sitesint "sites.internet.abc.com" } when HTTP_REQUEST { if {[class match [IP::client_addr] equals InternalHosts]} { HTTP::redirect http://[HTTP::host][HTTP::uri] } else { switch -glob -- [string tolower [HTTP::host]] { "sites.abc.com" { HTTP::header replace Host $static::sitesint STREAM::disable } "abc.com" { HTTP::header replace Host $static::bsint STREAM::disable } } } } when HTTP_RESPONSE { if {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::sitesint}{ HTTP::header replace Location [string map "$static::sitesint $static::sitesext" [HTTP::header Location]] } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::bsint}{ HTTP::header replace Location [string map "$static::bsint $static::bsext" [HTTP::header Location]] } in addition to it i need to redirect below redirection in same irule please guide me how to do this. if any one access from internet to the below url than it should redirect to https://asites.abc.com/xyz/finance redirection to below url http://asites.internet.abc.com/sites/finance and many more sites like this. please some one help me in this.thank you in advance.

Hello, Maybe you can test this peace of code : if {[PROFILE::exists clientssl] == 0}{ if { [HTTP::host] contains "asites.abc.com" and [string match "/*/finance*" [HTTP::uri]] } { set new_host [string map -nocase [list "abc.com" "internet.abc.com"] [HTTP::host]] HTTP::redirect https://$new_host[HTTP::uri] } }Not Sure that string match will works that way need to test.

I want to Redirect multiple Sites in a single Irule. please help me with the irule command.

49 Replies

Yann_Desmarest
Cirrus
Aug 24, 2014
Maybe you can try this

when HTTP_REQUEST { if { [HTTP::host] equals "asites.abc.com" } { switch -glob [HTTP::uri] { "/xyz/finance" - "/xyz/site2" - "/xyz/site3" - "/xyz/site4" - "/xyz/site5" { HTTP::redirect "http://asites.internet.abc.com[string map -nocase [list "/xyz/finance" "/sites/finance" "/xyz/test" "/sites/test"] [HTTP::uri]]" } default {} } }

You can also use datagroup to achieve what you want

when HTTP_REQUEST { if { [HTTP::host] equals "asites.abc.com" } { if { class match [HTTP::uri] equals mydatagroup } { HTTP::redirect "http://asites.internet.abc.com[class lookup [HTTP::uri] mydatagroup]" } } }

where datagroup of type string contains "/xyz/finance" with value "/sites/finance"
- ShakN_167332
  Nimbostratus
  Aug 24, 2014
  Will this irule work for my internet traffic redirection from https to http. when HTTP_REQUEST { if {[class match [IP::client_addr] equals InternalHosts]} { HTTP::redirect http://[HTTP::host][HTTP::uri] } else { switch -glob -- [string tolower [HTTP::host]] { "https://asites.abc.com/bseu/finance" { HTTP::redirect "http://asites.internet.abc.com/sites/finance" } } }
- Yann_Desmarest
  Cirrus
  Aug 24, 2014
  It will not work as HTTP::host give you only asites.abc.com as result. You can do the following : switch -glob -- [string tolower "[HTTP::host][HTTP::uri]"] { "asites.abc.com/bseu/finance" ... You can't know you are in https or http because you are in the HTTP_REQUEST event I suggest you to add the following : if {[PROFILE::exists clientssl] == 0}{ set proto "http" } else { set proto "https" } ... switch -glob -- [string tolower "$proto://[HTTP::host][HTTP::uri]"] { "http://asites.abc.com/bseu/finance" ...
- ShakN_167332
  Nimbostratus
  Aug 25, 2014
  i get the below error when i try to create the data group which you suggested in irule. 01070151:3: Rule [test] error: line 3: [parse error: PARSE syntax 104 {syntax error in expression " class match [HTTP::uri] equals test ": variable references require preceding $}] [{ class match [HTTP::uri] equals test }]
Yann_Desmarest_
Nacreous
Aug 25, 2014
Hello,

There is missing bracket :

[class match [HTTP::uri] equals test]
- ShakN_167332
  Nimbostratus
  Aug 25, 2014
  it is not working do i ahve to use the full url. http://asites.abc.com/xyz/finance/SitePages/Home.aspx do i have to use full url like after /xyz/finance it is sitesPages/homes.aspx.
- Yann_Desmarest_
  Nacreous
  Aug 25, 2014
  can you repost the full irule you are trying to test ?
- ShakN_167332
  Nimbostratus
  Aug 25, 2014
  when HTTP_REQUEST { if {[HTTP::host] equals "awww.abc.com"} { HTTP::redirect "http://aportal.abc.com[HTTP::uri]" } if { [HTTP::host] equals "asites.abc.com" and [HTTP::uri] starts_with "/bseu/finance" } { HTTP::redirect "http://asites.abc.com/sites/finance" } }
Yann_Desmarest
Cirrus
Aug 25, 2014
Hello,

There is missing bracket :

[class match [HTTP::uri] equals test]
- ShakN_167332
  Nimbostratus
  Aug 25, 2014
  it is not working do i ahve to use the full url. http://asites.abc.com/xyz/finance/SitePages/Home.aspx do i have to use full url like after /xyz/finance it is sitesPages/homes.aspx.
- Yann_Desmarest
  Cirrus
  Aug 25, 2014
  can you repost the full irule you are trying to test ?
- ShakN_167332
  Nimbostratus
  Aug 25, 2014
  when HTTP_REQUEST { if {[HTTP::host] equals "awww.abc.com"} { HTTP::redirect "http://aportal.abc.com[HTTP::uri]" } if { [HTTP::host] equals "asites.abc.com" and [HTTP::uri] starts_with "/bseu/finance" } { HTTP::redirect "http://asites.abc.com/sites/finance" } }
Yann_Desmarest_
Nacreous
Aug 26, 2014
Hello,

You can add the following line below your HTTP::redirect command

log local0. "[HTTP::host] - client ip : [IP::client_addr]"

Then you can see logs at /var/log/ltm or via GUI System -> Logs -> Local Traffic
- ShakN_167332
  Nimbostratus
  Aug 26, 2014
  Hi yaan, How to add logging to this irule to check the incoming urla nd uri and redirected url and uri.. f { [HTTP::host] equals "asites.abc.com" and [HTTP::uri] starts_with "/bseu/finance" } { HTTP::redirect "http://asites.abc.com/sites/finance" }
Yann_Desmarest
Cirrus
Aug 26, 2014
Hello,

You can add the following line below your HTTP::redirect command

log local0. "[HTTP::host] - client ip : [IP::client_addr]"

Then you can see logs at /var/log/ltm or via GUI System -> Logs -> Local Traffic
- ShakN_167332
  Nimbostratus
  Aug 26, 2014
  Hi yaan, How to add logging to this irule to check the incoming urla nd uri and redirected url and uri.. f { [HTTP::host] equals "asites.abc.com" and [HTTP::uri] starts_with "/bseu/finance" } { HTTP::redirect "http://asites.abc.com/sites/finance" }
Yann_Desmarest_
Nacreous
Aug 26, 2014
when HTTP_REQUEST { if {[HTTP::host] equals "awww.abc.com"} { HTTP::redirect "http://aportal.abc.com[HTTP::uri]" log local0. "[HTTP::host] - client ip : [IP::client_addr] - Redirect to http://aportal.abc.com[HTTP::uri]" } if { [HTTP::host] equals "asites.abc.com" and [HTTP::uri] starts_with "/bseu/finance" } { log local0. "[HTTP::host] - client ip : [IP::client_addr] - Before URI : [HTTP::uri], Redirect to http://asites.abc.com/sites/finance" HTTP::redirect "http://asites.abc.com/sites/finance" } }
- ShakN_167332
  Nimbostratus
  Aug 28, 2014
  Hi thank you so much it worked.
- ShakN_167332
  Nimbostratus
  Aug 28, 2014
  i code one more code log local0. "Incoming URI = [HTTP::uri]" if { [string tolower [HTTP::uri]] starts_with "/bseu" } { set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]] log local0. "New URI = $uri" HTTP::uri $uri } } now client requirement changed, above code is working where it is redirecting all the sites to required uri but client wants 2 sites which is /bseu and /bseu/it should not redirect according to the code. please suggest how this can be achived.
Yann_Desmarest
Cirrus
Aug 26, 2014
when HTTP_REQUEST { if {[HTTP::host] equals "awww.abc.com"} { HTTP::redirect "http://aportal.abc.com[HTTP::uri]" log local0. "[HTTP::host] - client ip : [IP::client_addr] - Redirect to http://aportal.abc.com[HTTP::uri]" } if { [HTTP::host] equals "asites.abc.com" and [HTTP::uri] starts_with "/bseu/finance" } { log local0. "[HTTP::host] - client ip : [IP::client_addr] - Before URI : [HTTP::uri], Redirect to http://asites.abc.com/sites/finance" HTTP::redirect "http://asites.abc.com/sites/finance" } }
- ShakN_167332
  Nimbostratus
  Aug 28, 2014
  Hi thank you so much it worked.
- ShakN_167332
  Nimbostratus
  Aug 28, 2014
  i code one more code log local0. "Incoming URI = [HTTP::uri]" if { [string tolower [HTTP::uri]] starts_with "/bseu" } { set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]] log local0. "New URI = $uri" HTTP::uri $uri } } now client requirement changed, above code is working where it is redirecting all the sites to required uri but client wants 2 sites which is /bseu and /bseu/it should not redirect according to the code. please suggest how this can be achived.

Yann_Desmarest_

Nacreous

Aug 28, 2014

Hello,

You can add an if condition

log local0. "Incoming URI = [HTTP::uri]"
    if { [string tolower [HTTP::uri]] starts_with "/bseu" } {
        if { [string tolower [HTTP::uri]] equals "/bseu" or [string tolower [HTTP::uri]] starts_with "/bseu/it" } {
            set uri [HTTP::uri]
        } else {
            set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]]
        }
        log local0. "New URI = $uri"
        HTTP::uri $uri
    }
}

ShakN_167332
Nimbostratus
Sep 01, 2014
when i use this code my redirection is working as expected but stopps working after first time testing. if there any issue with the code. can you please help me.

Yann_Desmarest

Cirrus

Aug 28, 2014

Hello,

You can add an if condition

log local0. "Incoming URI = [HTTP::uri]"
    if { [string tolower [HTTP::uri]] starts_with "/bseu" } {
        if { [string tolower [HTTP::uri]] equals "/bseu" or [string tolower [HTTP::uri]] starts_with "/bseu/it" } {
            set uri [HTTP::uri]
        } else {
            set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]]
        }
        log local0. "New URI = $uri"
        HTTP::uri $uri
    }
}

ShakN_167332
Nimbostratus
Sep 01, 2014
when i use this code my redirection is working as expected but stopps working after first time testing. if there any issue with the code. can you please help me.

ShakN_167332
Nimbostratus
Sep 01, 2014
this is my irule and applied on vs 443. my /bseu to /sites redirection works first time and next time onwords redirection is not happening.

when RULE_INIT { set static::asitesext "asites.abc.com" set static::asitesint "asites.internet.abc.com" set static::aportalext "aportal.abc.com" set static::aportalint "aportal.internet.abc.com" set static::amyext "amy.abc.com" set static::amyint "amy.internet.abc.com" set static::aextranetext "aextranet.abc.com" set static::aextranetint "aextranet.internet.abc.com" set static::awww "awww.abc.com" } when HTTP_REQUEST { if {[class match [IP::client_addr] equals InternalHosts]} {
HTTP::redirect http://[HTTP::host][HTTP::uri] } else { log local0. "Incoming URI = [HTTP::uri]" if { [string tolower [HTTP::uri]] starts_with "/bseu" } { if { [string tolower [HTTP::uri]] equals "/bseu" or [string tolower [HTTP::uri]] starts_with "/bseu/it" } { set uri [HTTP::uri] } else { set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]] } log local0. "New URI = $uri" HTTP::uri $uri }
switch -glob -- [string tolower [HTTP::host]] { "asites.abc.com" { HTTP::header replace Host $static::asitesint STREAM::disable } "awww.abc.com" { HTTP::redirect https://aportal.abc.com STREAM::disable } "aportal.abc.com" { HTTP::header replace Host $static::aportalint STREAM::disable } "amy.abc.com" { HTTP::header replace Host $static::amyint STREAM::disable } "aextranet.abc.com" { HTTP::header replace Host $static::aextranetint STREAM::disable } }

} } when HTTP_RESPONSE { if {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::asitesint}{ HTTP::header replace Location [string map "$static::asitesint $static::asitesext" [HTTP::header Location]] STREAM::enable } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::aportalint}{ HTTP::header replace Location [string map "$static::aportalint $static::aportalext" [HTTP::header Location]] STREAM::enable } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::amyint}{ HTTP::header replace Location [string map "$static::amyint $static::amyext" [HTTP::header Location]] STREAM::enable } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::aextranetint}{ HTTP::header replace Location [string map "$static::aextranetint $static::aextranetext" [HTTP::header Location]] STREAM::enable } }
- StephanManthey
  Nacreous
  Sep 01, 2014
  Could you please provide the log output by running the following command while testing: tail -f /var/log/ltm
- ShakN_167332
  Nimbostratus
  Sep 02, 2014
  please find the below output of the log tail -f/var/log/ltm [admin@xyz:Active] ~ tail -f /var/log/ltm | grep test Sep 2 10:37:39 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/finance Sep 2 10:37:39 local/tmm info tmm[4924]: Rule test : New URI = /bseu/finance Sep 2 10:38:13 local/tmm info tmm[4924]: Rule test : Incoming URI = /favicon.ico Sep 2 10:38:23 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/hr Sep 2 10:38:23 local/tmm info tmm[4924]: Rule test : New URI = /bseu/hr Sep 2 10:38:31 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/it Sep 2 10:38:31 local/tmm info tmm[4924]: Rule test : New URI = /bseu/it Sep 2 10:39:08 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/bd Sep 2 10:39:08 local/tmm info tmm[4924]: Rule test : New URI = /bseu/bd Sep 2 10:39:21 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/rd Sep 2 10:39:21 local/tmm info tmm[4924]: Rule test : New URI = /bseu/rd Sep 2 10:39:54 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/procurement Sep 2 10:39:54 local/tmm info tmm[4924]: Rule test : New URI = /bseu/procurement Sep 2 10:40:03 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/markets Sep 2 10:40:03 local/tmm info tmm[4924]: Rule test : New URI = /bseu/markets
- ShakN_167332
  Nimbostratus
  Sep 04, 2014
  Can any one give me alternative code for my requirement.

Forum Discussion

I want to Redirect multiple Sites in a single Irule. please help me with the irule command.

49 Replies

F5 Architecture Track Sessions - AppWorld 2026

Recent Discussions

VIP in https that redirect to another vip in https

can you help with getting a BigIP virtual edition serial key

In Using the AST tool am I pointing it to TENANTS or to the F5OS(hardware) I have?

2026 is Almost Here

VIP is not responding on SYN after enabling other modules like ASM, APM and AFM.

Related Content

F5 HTTPS Redirect 2025

Using n8n To Orchestrate Multiple Agents

WAF evasion techniques for Command Injection

Overview of MITRE ATT&CK Tactic - TA0011 Command and Control

Power of tmsh commands using Ansible

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS