Forum Discussion
iRule Needed for Redirect
1) Got EXT and INT LBs 2) VIPs and pools setup for EXT & INT 3) SSL Cert is terminated on EXT and INT LBs 4) INT traffic is sent un-encrypted to application on port 80 5) External app access is then send to http://int-biz.abc.com:7020
I'm in need of a iRule that will redirect the original http://int-biz.abc.com:7020 over to https://int-biz.abc.com:7020
Appreciate any help on this.
2 Replies
- Stanislas_Piro2
Cumulonimbus
Hi,
what do you mean? are you sure the need is "redirect"...
"redirect" is a specific word in HTTP: it is a reply to the client saying the ressource has moved (temporary of definitively)
as source and target share IP (same hostname) and port and the only difference is protocol, you cannot " redirect" from http://int-biz.abc.com:7020 to https://int-biz.abc.com:7020
Is the flow the following:
- Internal users : Client -> VS LB_INT port 7020 (Client SSL enabled) -> pool member port 80
- External users : Client -> VS LB_EXT port 443 (Client SSL enabled) -> VS LB_INT port 7020 (Client SSL enabled) -> pool member port 80
If this is the flow, you only need to enable a Server SSL profile on the VS LB_OUT
- Mister_C
Nimbostratus
Correct, poor choice of words..
I will check into using a Server SSL profile on the VIP.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com