Forum Discussion
NimbostratusiRule Maintanance Page doesn't work with https
Hi all,
I have the following iRule running and it works good for an http virtual server. But on an https virtual server I get an error. Anyone an idea?
when HTTP_REQUEST {
if { [active_members [LB::server pool] ] == 0 } {
if { [HTTP::uri] ends_with "/wlw_logo.png" } {
HTTP::respond 503 content [ifile get "wlw_logo.png"]
} else {
HTTP::respond 503 content [ifile get wartungsseite.html]
}
}
}
9 Replies
Samir_Jha_52506Noctilucent
I don't see any issue with iRule. can you please paste the error in irule.
Joern_OltmannI get an error from firefox Error: Secure Connection Failed The connection to xxx.xxx.de was interrupted while the page was loading. The site can not be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem.
- Samir_Jha_52506
I don't see any issue with iRule. can you please paste the error in irule.
- Hannes_Rapp
I think your problem is that you do not decrypt clientside SSL on your https VIP. By minimum, you will need to specify two things. A clientssl profile as one, and a HTTP profile as number two for this iRule to work on a https VIP.
- Joern_OltmannHm a clientside SSL and a modified HTTP Profile (Insert X-Forwarded-For enabled) I have, because the https VIP works fine when all member are available.
- Joern_OltmannOK I found the Problem, because the HTTPS Header was not set before the iRule. But now I don't see the logo :-(
Hannes_Rapp_162Nacreous
I think your problem is that you do not decrypt clientside SSL on your https VIP. By minimum, you will need to specify two things. A clientssl profile as one, and a HTTP profile as number two for this iRule to work on a https VIP.
- Joern_OltmannHm a clientside SSL and a modified HTTP Profile (Insert X-Forwarded-For enabled) I have, because the https VIP works fine when all member are available.
- Joern_OltmannOK I found the Problem, because the HTTPS Header was not set before the iRule. But now I don't see the logo :-(
