Forum Discussion
Aimen_Bouziri_2
Nimbostratus
Dec 07, 2006Irule that is functionning in version 9.1.0 but not in 9.1.2
Hi,
- We are using an irule to enable the tunnelling of SSL data over plain HTTP via the CONNECT method for proxies. This irule is functionning correctly in version 9.1.0 but not in version 9.1.2, a lot of web sites are not accessible on the Internet (approximatly half of them) but I don't understand why. This irule is used to load balance through proxy Blue Coat. Without this irule, the HTTPS is not functionning.
- Here is an small explanation of the irule:
When a client try to access a HTTPS web sites (with a connect),
a variable is incremented. This allows to access a part of the algorithm that deactivate the HTTP profile when it is a HTTPS web site.
Here is the irule:
rule ProxyHTTP-NEW {
when HTTP_REQUEST {
HTTP::header remove "Proxy-Connection"
set sslreq 0
if {[string toupper [HTTP::method]] eq "CONNECT"}{
set httphost "CONNECT [HTTP::host]"
set sslreq 1
} else {
set httphost "GET [HTTP::host]"
}
}
when HTTP_REQUEST_SEND {
if { $sslreq equals 1 } {
HTTP::disable
}
}
}
Do you understand why this irule is functionning in version 9.1.0 but not in version 9.1.2?
Thanks in advance for your help.
Aimen BOUZIRI
1 Reply
Sort By
- Deb_Allen_18Historic F5 AccountHi Aimen -
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects