I have mulitple sites where i want my LAN users should not to redirected to https when they use url with http. but when any internet users use http://abc.com than it should redirect to https://abc.com Can i use the below irule for this. when HTTP_REQUEST { if {[HTTP::host] equals "abc.com"} { HTTP::redirect "https://abc.com[HTTP::uri]" } } Now i want to do for multiple sites in same irule can i use another if statement?

This irule will work. You may change it to fit for your need of multiple sites : when HTTP_REQUEST { switch -glob [HTTP::host] { "hostname1" { HTTP::redirect "https://hostname1[HTTP::uri] } "hostname1" { HTTP::redirect "https://hostname1[HTTP::uri] } "hostname2" { HTTP::redirect "https://hostname2[HTTP::uri] } default { } } } If this is just for redirecting http to https, you can just use this irule : when HTTP_REQUEST { HTTP::redirect "https://[HTTP::host][HTTP::uri]" }

I have mulitple sites where i want my LAN users should not to redirected to https when they use url with http. but when any internet users use http://abc.com than it should redirect to https://abc.com you may use IP::addr to check whether it is lan user traffic and then redirect if not. e.g. config [root@ve11a:Standby:In Sync] config tmsh list ltm virtual bar ltm virtual bar { destination 172.28.24.10:80 ip-protocol tcp mask 255.255.255.255 pool foo profiles { http { } tcp { } } rules { qux } source 0.0.0.0/0 source-address-translation { type automap } vs-index 65 } [root@ve11a:Standby:In Sync] config tmsh list ltm rule qux ltm rule qux { when HTTP_REQUEST { if { !([IP::addr [IP::client_addr] equals 172.28.24.0/24]) } { HTTP::redirect "https://[HTTP::host][HTTP::uri]" } } } test1 (client ip is 172.28.24.11) [root@ve11a:Standby:In Sync] config curl -I http://172.28.24.10/ HTTP/1.1 200 OK Date: Wed, 20 Aug 2014 07:08:10 GMT Server: Apache/2.2.3 (CentOS) Last-Modified: Sun, 09 Feb 2014 08:39:51 GMT ETag: "41879c-59-2a9c23c0" Accept-Ranges: bytes Content-Length: 89 Content-Type: text/html; charset=UTF-8 test2 (client ip is 172.28.77.29) curl -I http://172.28.24.10/ HTTP/1.0 302 Found Location: https://172.28.24.10/ Server: BigIP Connection: Keep-Alive Content-Length: 0

Thank you that was really helpful. I need more help. in our setup we have sites which are accessed by internal users as well as internet users via http and https. so we have created 4 VS (2 internal VS, one for http and one for https for internal users) and (2 for internet users 1 for http and one for https). our requirement is any lan user access sites via http than it should be http if lan users type https than it should redirect to http. similarly if any internet users access sites via http than it should redirect to https. this is done by 1 irule one for http to https redirection. when RULE_INIT { set static::bsint "internet.abc.com" set static::sitesint "sites.internet.abc.com" } when HTTP_REQUEST { if {[class match [IP::client_addr] equals InternalHosts]} { HTTP::redirect http://[HTTP::host][HTTP::uri] } else { switch -glob -- [string tolower [HTTP::host]] { "sites.abc.com" { HTTP::header replace Host $static::sitesint STREAM::disable } "abc.com" { HTTP::header replace Host $static::bsint STREAM::disable } } } } when HTTP_RESPONSE { if {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::sitesint}{ HTTP::header replace Location [string map "$static::sitesint $static::sitesext" [HTTP::header Location]] } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::bsint}{ HTTP::header replace Location [string map "$static::bsint $static::bsext" [HTTP::header Location]] } in addition to it i need to redirect below redirection in same irule please guide me how to do this. if any one access from internet to the below url than it should redirect to https://asites.abc.com/xyz/finance redirection to below url http://asites.internet.abc.com/sites/finance and many more sites like this. please some one help me in this.thank you in advance.

Hello, Maybe you can test this peace of code : if {[PROFILE::exists clientssl] == 0}{ if { [HTTP::host] contains "asites.abc.com" and [string match "/*/finance*" [HTTP::uri]] } { set new_host [string map -nocase [list "abc.com" "internet.abc.com"] [HTTP::host]] HTTP::redirect https://$new_host[HTTP::uri] } }Not Sure that string match will works that way need to test.

I want to Redirect multiple Sites in a single Irule. please help me with the irule command.

49 Replies

Yann_Desmarest_

Nacreous

Aug 28, 2014

Hello,

You can add an if condition

log local0. "Incoming URI = [HTTP::uri]"
    if { [string tolower [HTTP::uri]] starts_with "/bseu" } {
        if { [string tolower [HTTP::uri]] equals "/bseu" or [string tolower [HTTP::uri]] starts_with "/bseu/it" } {
            set uri [HTTP::uri]
        } else {
            set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]]
        }
        log local0. "New URI = $uri"
        HTTP::uri $uri
    }
}

ShakN_167332
Nimbostratus
Sep 01, 2014
when i use this code my redirection is working as expected but stopps working after first time testing. if there any issue with the code. can you please help me.

Yann_Desmarest

Cirrus

Aug 28, 2014

Hello,

You can add an if condition

log local0. "Incoming URI = [HTTP::uri]"
    if { [string tolower [HTTP::uri]] starts_with "/bseu" } {
        if { [string tolower [HTTP::uri]] equals "/bseu" or [string tolower [HTTP::uri]] starts_with "/bseu/it" } {
            set uri [HTTP::uri]
        } else {
            set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]]
        }
        log local0. "New URI = $uri"
        HTTP::uri $uri
    }
}

ShakN_167332
Nimbostratus
Sep 01, 2014
when i use this code my redirection is working as expected but stopps working after first time testing. if there any issue with the code. can you please help me.

ShakN_167332
Nimbostratus
Sep 01, 2014
this is my irule and applied on vs 443. my /bseu to /sites redirection works first time and next time onwords redirection is not happening.

when RULE_INIT { set static::asitesext "asites.abc.com" set static::asitesint "asites.internet.abc.com" set static::aportalext "aportal.abc.com" set static::aportalint "aportal.internet.abc.com" set static::amyext "amy.abc.com" set static::amyint "amy.internet.abc.com" set static::aextranetext "aextranet.abc.com" set static::aextranetint "aextranet.internet.abc.com" set static::awww "awww.abc.com" } when HTTP_REQUEST { if {[class match [IP::client_addr] equals InternalHosts]} {
HTTP::redirect http://[HTTP::host][HTTP::uri] } else { log local0. "Incoming URI = [HTTP::uri]" if { [string tolower [HTTP::uri]] starts_with "/bseu" } { if { [string tolower [HTTP::uri]] equals "/bseu" or [string tolower [HTTP::uri]] starts_with "/bseu/it" } { set uri [HTTP::uri] } else { set uri [string map -nocase {"/bseu" "/sites"} [HTTP::uri]] } log local0. "New URI = $uri" HTTP::uri $uri }
switch -glob -- [string tolower [HTTP::host]] { "asites.abc.com" { HTTP::header replace Host $static::asitesint STREAM::disable } "awww.abc.com" { HTTP::redirect https://aportal.abc.com STREAM::disable } "aportal.abc.com" { HTTP::header replace Host $static::aportalint STREAM::disable } "amy.abc.com" { HTTP::header replace Host $static::amyint STREAM::disable } "aextranet.abc.com" { HTTP::header replace Host $static::aextranetint STREAM::disable } }

} } when HTTP_RESPONSE { if {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::asitesint}{ HTTP::header replace Location [string map "$static::asitesint $static::asitesext" [HTTP::header Location]] STREAM::enable } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::aportalint}{ HTTP::header replace Location [string map "$static::aportalint $static::aportalext" [HTTP::header Location]] STREAM::enable } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::amyint}{ HTTP::header replace Location [string map "$static::amyint $static::amyext" [HTTP::header Location]] STREAM::enable } elseif {[HTTP::is_redirect] && [string tolower [HTTP::header "Location"]] contains $static::aextranetint}{ HTTP::header replace Location [string map "$static::aextranetint $static::aextranetext" [HTTP::header Location]] STREAM::enable } }
- StephanManthey
  Nacreous
  Sep 01, 2014
  Could you please provide the log output by running the following command while testing: tail -f /var/log/ltm
- ShakN_167332
  Nimbostratus
  Sep 02, 2014
  please find the below output of the log tail -f/var/log/ltm [admin@xyz:Active] ~ tail -f /var/log/ltm | grep test Sep 2 10:37:39 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/finance Sep 2 10:37:39 local/tmm info tmm[4924]: Rule test : New URI = /bseu/finance Sep 2 10:38:13 local/tmm info tmm[4924]: Rule test : Incoming URI = /favicon.ico Sep 2 10:38:23 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/hr Sep 2 10:38:23 local/tmm info tmm[4924]: Rule test : New URI = /bseu/hr Sep 2 10:38:31 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/it Sep 2 10:38:31 local/tmm info tmm[4924]: Rule test : New URI = /bseu/it Sep 2 10:39:08 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/bd Sep 2 10:39:08 local/tmm info tmm[4924]: Rule test : New URI = /bseu/bd Sep 2 10:39:21 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/rd Sep 2 10:39:21 local/tmm info tmm[4924]: Rule test : New URI = /bseu/rd Sep 2 10:39:54 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/procurement Sep 2 10:39:54 local/tmm info tmm[4924]: Rule test : New URI = /bseu/procurement Sep 2 10:40:03 local/tmm info tmm[4924]: Rule test : Incoming URI = /bseu/markets Sep 2 10:40:03 local/tmm info tmm[4924]: Rule test : New URI = /bseu/markets
- ShakN_167332
  Nimbostratus
  Sep 04, 2014
  Can any one give me alternative code for my requirement.

Forum Discussion

I want to Redirect multiple Sites in a single Irule. please help me with the irule command.

49 Replies

F5 Architecture Track Sessions - AppWorld 2026

Recent Discussions

can you help with getting a BigIP virtual edition serial key

VIP in https that redirect to another vip in https

In Using the AST tool am I pointing it to TENANTS or to the F5OS(hardware) I have?

2026 is Almost Here

VIP is not responding on SYN after enabling other modules like ASM, APM and AFM.

Related Content

F5 HTTPS Redirect 2025

Using n8n To Orchestrate Multiple Agents

WAF evasion techniques for Command Injection

Overview of MITRE ATT&CK Tactic - TA0011 Command and Control

Power of tmsh commands using Ansible

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS