irule to a pool using SSL

This was a very helpful stream of info.

This is good information. I am new to F5 and have found the online info great but I need some help. I have setup SSL offloading but my website returns HTTP not HTTPS. Current version is 11.4.0. I imported my cert and key into SSL profile (client), created my pool using port 80 on the pool members, created my VS using port 443. I'm using the http profile. I am not familiar with iRules but maybe I need a redirect? When I ping I am hitting the vip.

When you say "my website returns HTTP not HTTPS", are you referring to redirects and document object references pointing to the http:// URL? If so, that's actually a pretty common issue when offloading SSL, and there are two things you can do about it:

1. There's an option in the HTTP profile called "Redirect Rewrite". This option is designed to catch redirects from the server and rewrite the http:// in the Location header to https://. This only applies to redirect (ie. 30x) responses.

2. An iRule and STREAM profile to catch all of the document object references in the HTTP payload. Apply a generic (empty) STREAM profile to the VIP and the following iRule:

   when HTTP_REQUEST {
       HTTP::header remove Accept-Encoding
       STREAM::disable
   }
   when HTTP_RESPONSE {
       if { [HTTP::header Content-Type] contains "text" } {
           STREAM::expression {@http://@https://@}
           STREAM::enable
       }
   }
   

A STREAM is basically like a regular expression evaluator, but in hardware, so it's super fast. The above will find any reference to the string http:// in the HTTP response paylaod and replace it with https://. You may need to be more explicit in your search/replace if you have strings that you don't want replaced.

Kevin,

Thank you so much. I was able to use the HTTP profile redirect/rewrite and that worked. I did try Option 2 but wasn't successful. I think I had details incorrect. I will work on that later. Patty

If you're redirecting within https, you could do something like this:

when HTTP_REQUEST {
    if { [HTTP::path] eq "/" } {
     HTTP::respond 301 Location "https://abc.xyz/BankingApp"   
    }
}

Thanks for the feedback. I will implement and revert