For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

krmidhun_323560's avatar
krmidhun_323560
Icon for Nimbostratus rankNimbostratus
Aug 09, 2017
Solved

iRule redirect with URL masking and URI rewrite

Hi,   I am looking for a iRule to do a URL redirection and also appending a URI to the redirected URL. The redirected URL should be masked so that the client will not see that in the address bar. ...
application delivery
iRules
LTM
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Aug 09, 2017

    Hi,

    You can't achieve what you are expecting without using iframes. But I strongly discourage you to use them for security reasons.

    You can instead redirect to a relative path and then forward the request to the correct backend server :

    `

    when HTTP_REQUEST { 

    if { [HTTP::host] contains "buyer.abc.com" and [HTTP::path] eq "/" } {
        HTTP::redirect "/apm/rest/MOBILITY/authService/1.0" 
        return
    }
    if {[HTTP::host] contains "buyer.abc.com" and [HTTP::path] eq "/apm/rest/MOBILITY/authService/1.0"} {
        node myserver01 9001
        return 
    }
}

    `

Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
Aug 09, 2017

Hi,

You can't achieve what you are expecting without using iframes. But I strongly discourage you to use them for security reasons.

You can instead redirect to a relative path and then forward the request to the correct backend server :

`

when HTTP_REQUEST { 

    if { [HTTP::host] contains "buyer.abc.com" and [HTTP::path] eq "/" } {
        HTTP::redirect "/apm/rest/MOBILITY/authService/1.0" 
        return
    }
    if {[HTTP::host] contains "buyer.abc.com" and [HTTP::path] eq "/apm/rest/MOBILITY/authService/1.0"} {
        node myserver01 9001
        return 
    }
}

`

krmidhun_323560's avatar
krmidhun_323560
Icon for Nimbostratus rankNimbostratus
Aug 11, 2017

I added both SSL client and server profiles to both virtuals and also enabled SNAT (automap), but I get http 404 status code when I hit the URL. Could this be because of the reason that the internal URL is hard coded on the server with the servername myserver01:9001?

 

So in this case, can we first redirect the URL to the internal one and then forward the request to the virtual and also make the internal URL not visible to the client?