Forum Discussion
thunderbird_920
Jun 29, 2012Nimbostratus
IRule http redirect https
I need help here. When I access the pool member ip from web brower directly, I can see the page (https//poolmemeberIP).
When I apply the irule as shown below to redirect http to https from the virtual server and try to access the page (), it did not show up.
when HTTP_REQUEST {
HTTP::redirect ]
}
From command terminal, I run b conn all show. Below is the resut.
clientIP:ariliamulti <-> virtualserverIP:http <-> any6 tcp 1/0
clientIP:rdc-wh-eos <-> virtualserverIP:https <-> any6 tcp 1/1
I did the test by creating another virtual server with service port https and access it with https://virtual serverIP, the page did not show up as well.
Is the irule working properly? How to trobleshoot from here?
Thank you for prompt reply.
- nitassEmployeecan you post https virtual server and pool configuration?
- thunderbird_920NimbostratusHi,
- nitassEmployeee.g.
[root@ve1024:Active] config b virtual bar80 list virtual bar80 { destination 172.28.19.79:80 ip protocol 6 rules myrule profiles { http {} tcp {} } } [root@ve1024:Active] config b rule myrule list rule myrule { when HTTP_REQUEST { HTTP::redirect "https://[HTTP::host][HTTP::uri]" } } [root@ve1024:Active] config b virtual bar443 list virtual bar443 { snat automap pool foo destination 172.28.19.79:443 ip protocol 6 profiles { clientssl { clientside } tcp {} } } [root@ve1024:Active] config b pool foo list pool foo { members 200.200.200.101:80 {} } [root@ve1024:Active] config curl -ILk http://172.28.19.79 HTTP/1.0 302 Found Location: https://172.28.19.79/ Server: BigIP Connection: Keep-Alive Content-Length: 0 HTTP/1.1 200 OK Date: Fri, 29 Jun 2012 09:30:18 GMT Server: Apache/2.2.3 (CentOS) Last-Modified: Fri, 11 Nov 2011 14:48:14 GMT ETag: "4183e4-3e-9c564780" Accept-Ranges: bytes Content-Length: 62 Content-Type: text/html; charset=UTF-8
- thunderbird_920NimbostratusHi,
- nitassEmployeecan you try to create https virtual server similar to this?
virtual Admin_LB_https { snat automap pool admin destination 172.55.128.88:https ip protocol tcp persist source_addr profiles { http {} clientssl { clientside } tcp_admin {} } }
- i might be overlooking it, but nowhere i see the https virtual server you are redirecting to, the one you show is http i believe.
- santosh_81454NimbostratusHi thunderbird,
- thunderbird_920NimbostratusHi All,
- nitassEmployeejust a quick clarification.
- nitassEmployeeI have done what you mention. The result was still the same.can you post your configuration here?
Recent Discussions
Related Content
Â
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects