Forum Discussion

PeterB_71603's avatar
PeterB_71603
Icon for Nimbostratus rankNimbostratus
Jun 26, 2017

iRule node directive not working with SSL terminated virtual server

I'm having trouble with an iRule running on a virtual server handling https traffic - specifically with the "node" directive. The situation: I have a pair of virtual servers, I'll call them Port80...
BIG-IP
devops
iRules
  • ekaleido_26616's avatar
    ekaleido_26616
    Jun 26, 2017

    Have you considered changing the switch to something like this? Seems buggy that http works but not https, but I would think the query is the better aspect to select from.

    switch -glob [string tolower [HTTP::query]] {
  "s=prodapp2" { node 192.168.196.43 }
}
Mark_60861's avatar
Mark_60861
Icon for Nimbostratus rankNimbostratus
Jun 29, 2017

Peter,

 

If you review the iRule node command You'll notice "Note: If is omitted, the client's destination port is used for the serverside connection." Remember, the node command bypasses all load balancing, you're no longer using a pool or pool member, your going direct to the node. As such, since you didn't specify a port, the F5 uses the client's original destination port, in this case it'd be 443.

 

 

So, are you expecting to send the traffic to the servers on port 443? Perhaps you should use the command "node 80".