Forum Discussion

thunderbird_920's avatar
thunderbird_920
Icon for Nimbostratus rankNimbostratus
Jun 29, 2012

IRule http redirect https

I need help here. When I access the pool member ip from web brower directly, I can see the page (https//poolmemeberIP).

 

 

When I apply the irule as shown below to redirect http to https from the virtual server and try to access the page (), it did not show up.

 

 

when HTTP_REQUEST {

 

HTTP::redirect ]

 

}

 

 

From command terminal, I run b conn all show. Below is the resut.

 

 

clientIP:ariliamulti <-> virtualserverIP:http <-> any6 tcp 1/0

 

clientIP:rdc-wh-eos <-> virtualserverIP:https <-> any6 tcp 1/1

 

 

I did the test by creating another virtual server with service port https and access it with https://virtual serverIP, the page did not show up as well.

 

 

Is the irule working properly? How to trobleshoot from here?

 

 

Thank you for prompt reply.

 

 

 

 

 

 

  • Here you go

     

    [admin@KL-TP-F5-LTM1:Active]]b virtual Admin_LB list

     

    virtual Admin_LB {

     

    snat automap

     

    pool admin

     

    destination 172.55.128.88:http

     

    ip protocol tcp

     

    rules http_to_https_redirect

     

    persist source_addr

     

    profiles {

     

    clientssl {

     

    clientside

     

    }

     

    http {}

     

    tcp_admin {}

     

    }

     

    }

     

    [admin@KL-TP-F5-LTM1:Active]] b pool admin list

     

    pool admin {

     

    monitor all https_Alive.html

     

    members {

     

    172.55.128.28:http {

     

    monitor gateway_icmp

     

    }

     

    172.55.128.29:http {

     

    monitor gateway_icmp

     

    }

     

    }

     

    }

     

    [admin@KL-TP-F5-LTM1:Active]] b virtual Admin_LB list

     

    virtual admin_LB_443 {

     

    pool admin_members

     

    destination 172.55.128.88:https

     

    ip protocol tcp

     

    profiles tcp_admin {}

     

    }

     

    [admin@KL-TP-F5-LTM1:Active]] b pool admin_members list

     

    pool admin_members {

     

    monitor all gateway_icmp

     

    members {

     

    172.55.128.28:https {}

     

    172.55.128.29:https {}

     

    }

     

    }

     

     

  • Here you go

     

    [admin@KL-TP-F5-LTM1:Active]]b virtual Admin_LB list

     

    virtual Admin_LB {

     

    snat automap

     

    pool admin

     

    destination 172.55.128.88:http

     

    ip protocol tcp

     

    rules http_to_https_redirect

     

    persist source_addr

     

    profiles {

     

    clientssl {

     

    clientside

     

    }

     

    http {}

     

    tcp_admin {}

     

    }

     

    }

     

    [admin@KL-TP-F5-LTM1:Active]] b pool admin list

     

    pool admin {

     

    monitor all https_Alive.html

     

    members {

     

    172.55.128.28:http {

     

    monitor gateway_icmp

     

    }

     

    172.55.128.29:http {

     

    monitor gateway_icmp

     

    }

     

    }

     

    }

     

    [admin@KL-TP-F5-LTM1:Active]] b virtual Admin_LB list

     

    virtual admin_LB_443 {

     

    pool admin_members

     

    destination 172.55.128.88:https

     

    ip protocol tcp

     

    profiles tcp_admin {}

     

    }

     

    [admin@KL-TP-F5-LTM1:Active]] b pool admin_members list

     

    pool admin_members {

     

    monitor all gateway_icmp

     

    members {

     

    172.55.128.28:https {}

     

    172.55.128.29:https {}

     

    }

     

    }