iRule rewrite | URL hiding

Hi Guys,

Have a requirement and I'll try to provide as much details as possible to help understand.

Internet users views web page, and posts web form to: htps://www.mysite.com/help/site1/search.do?book=blah

The 1st F5 (has SSL cert) receives the traffic and sends the request ( including form data, and URL and query string) to the 2nd F5 (without SSL cert, and is managed on a different dmz location) and the 2nd F5 points to webserver: HTTP://news.bizsite.com:8080/ehelp/microsites. The webserver returns the data to Internet users but the users should still see the URL they visited (htps://www.mysite.com/help/site1/search.do?book=blah)

Notes: Different Protocol ( https vs. http) Different Hostname ( www.mysite.com vs. news.bizsite.com) Different Port : 443 vs. 8080 everything after the "/help/site1" is passed to the the target webserver. Users\Internet browser should only see "https://www.mysite.com/help/site1/..." and NOT the HTTP://news.bizsite.com:8080/ehelp/microsites

In summary: the user only ever sees the URL:

HTTPS://www.mysite/help/site1/search.do?something=somethingelse&more=moreplus Note: everything after the “/site1/” could change – and we should account for such a scenario.

But, “end user redirection” – e.g., issuance of an HTTP 300, 301, 302 to the end user browser, should never occur, because we want to shield the end user from the actual destination URL.

Thanks, Edward

application delivery

BIG-IP Access Policy Manager (APM)

32 Replies

nitass
Employee
Feb 11, 2014
The log shows it's not capturing the right uri.

i still expect to see www.mysite.com as host and uri starts with /help/site1/ in the log. if you do not see it, i think you may need to check if host and uri information you have is correct indeed.
- ERLomboy_27803
  Nimbostratus
  Feb 11, 2014
  This is the other iRule. Can you find out which one is conflicting with what you have provided? when HTTP_REQUEST { if { [string tolower [HTTP::uri]] ne "/powermoves" } { switch -exact [string tolower [HTTP::host]] { "www.mysite.com" { if {[TCP::local_port] == 80} { HTTP::respond 301 Location "https://[HTTP::host][HTTP::uri]" } elseif { [string tolower [HTTP::uri]] starts_with "/forumsdotnetnuke/" } { if { [string tolower [HTTP::host]] ne "forums.mysite.com" } { HTTP::respond 301 Location "https://forums.mysite.com[HTTP::uri]" } } elseif {[string tolower [HTTP::uri]] starts_with "/summergames/" || [string tolower [HTTP::uri]] starts_with "/summergames"} { HTTP::respond 301 Location "http://summergames.mysite.com" } } "mysite.com" { if { [matchclass $::wwwredirects equals [string tolower [HTTP::path]]] } { HTTP::respond 301 Location "https://www.mysite.com[HTTP::uri]" } elseif { [TCP::local_port] == 80 } { HTTP::respond 301 Location "https://[HTTP::host][HTTP::uri]" } elseif { [string tolower [HTTP::uri]] starts_with "/ciqdotnet/excel/114/" || [string tolower [HTTP::uri]] starts_with "/ciqdotnet/excel/102/" } { HTTP::respond 301 Location "https://www.mysite.com[HTTP::uri]" } elseif { [string tolower [HTTP::uri]] starts_with "/forumsdotnetnuke/" } { if { [string tolower [HTTP::host]] ne "forums.mysite.com" } { HTTP::respond 301 Location "https://forums.mysite.com[HTTP::uri]" } } elseif {[string tolower [HTTP::uri]] starts_with "/summergames/" || [string tolower [HTTP::uri]] starts_with "/summergames"} { HTTP::respond 301 Location "http://summergames.mysite.com" } } default { if { [TCP::local_port] == 80 } { HTTP::respond 301 Location "https://[HTTP::host][HTTP::uri]" } elseif { [string tolower [HTTP::uri]] starts_with "/forumsdotnetnuke/" } { if { [string tolower [HTTP::host]] ne "forums.mysite.com" } { HTTP::respond 301 Location "https://forums.mysite.com[HTTP::uri]" } } } } } else { HTTP::redirect http://powermoves.mysite.com } }
nitass_89166
Noctilucent
Feb 11, 2014
This is the other iRule. Can you find out which one is conflicting with what you have provided?

don't you see log showing www.mysite.com as host and uri starts with /help/site1/ really? even irule conflicts, the log should be shown.
- ERLomboy_27803
  Nimbostratus
  Feb 11, 2014
  No, it doesn't show. Would it show even if the uri path is non-existent?
nitass
Employee
Feb 11, 2014
This is the other iRule. Can you find out which one is conflicting with what you have provided?

don't you see log showing www.mysite.com as host and uri starts with /help/site1/ really? even irule conflicts, the log should be shown.
- ERLomboy_27803
  Nimbostratus
  Feb 11, 2014
  No, it doesn't show. Would it show even if the uri path is non-existent?
nitass_89166
Noctilucent
Feb 11, 2014
Would it show even if the uri path is non-existent?

https://www.mysite.com/help/site1/ is incoming request from client to f5, isn't it?
- ERLomboy_27803
  Nimbostratus
  Feb 11, 2014
  yes, it's a request from client to F5.
- ERLomboy_27803
  Nimbostratus
  Feb 13, 2014
  Hi Nitass, Appreciate if you can provide further assistance on this. Thanks!
nitass
Employee
Feb 11, 2014
Would it show even if the uri path is non-existent?

https://www.mysite.com/help/site1/ is incoming request from client to f5, isn't it?
- ERLomboy_27803
  Nimbostratus
  Feb 11, 2014
  yes, it's a request from client to F5.
- ERLomboy_27803
  Nimbostratus
  Feb 13, 2014
  Hi Nitass, Appreciate if you can provide further assistance on this. Thanks!
nitass
Employee
Feb 23, 2014
Appreciate if you can provide further assistance on this.

i think you have to find out why https://www.mysite.com/help/site1/ is not shown in log.