For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Raj_57800's avatar
Raj_57800
Icon for Nimbostratus rankNimbostratus
Nov 24, 2008

iRule for Http redirect

I have defined a irule to forward http request to be converted as https. But when any https request to the same server is not being forwarded. This is the irule     when HTTP_REQUEST { ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Dec 10, 2008
You could consider changing the HTTP_REQUEST check to either send a redirect to https for all ports or add an else statement. As it is, if you added a default pool to the VIP and the request wasn't on 80 or 443 clients could access any other port on the default pool. 

 
   when CLIENT_ACCEPTED {   
      if {[TCP::local_port] == 443} {   
        HTTP::disable    
        pool test_pool     
      }    
   }    
      
   when HTTP_REQUEST {   
      if {[TCP::local_port] == 80} {   
        HTTP::redirect https://xxx.com    
      } else {   
          Reject the request 
         reject 
      }    
   }

Aaron