For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mister_C's avatar
Mister_C
Icon for Nimbostratus rankNimbostratus
Aug 13, 2015

iRule Needed for Redirect

1) Got EXT and INT LBs 2) VIPs and pools setup for EXT & INT 3) SSL Cert is terminated on EXT and INT LBs 4) INT traffic is sent un-encrypted to application on port 80 5) External app access is t...
application delivery
devops
iRules
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 13, 2015

Hi,

 

what do you mean? are you sure the need is "redirect"...

 

"redirect" is a specific word in HTTP: it is a reply to the client saying the ressource has moved (temporary of definitively)

 

as source and target share IP (same hostname) and port and the only difference is protocol, you cannot " redirect" from http://int-biz.abc.com:7020 to https://int-biz.abc.com:7020

 

Is the flow the following:

 

  • Internal users : Client -> VS LB_INT port 7020 (Client SSL enabled) -> pool member port 80
  • External users : Client -> VS LB_EXT port 443 (Client SSL enabled) -> VS LB_INT port 7020 (Client SSL enabled) -> pool member port 80

If this is the flow, you only need to enable a Server SSL profile on the VS LB_OUT