For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jhunclaudio_106's avatar
Jhunclaudio_106
Icon for Nimbostratus rankNimbostratus
Aug 31, 2009

iRule to match on the URL and then perform encryption and send traffic to designated web servers

Hi,

 

 

I am new with Irules formulation and i have a requirement base on the subject.

 

 

I have a current virtual server acceppting HTTPS from the internet and redirect the web traffic via HTTP in my http pool. but a new requirement to protect the customer information communication from BIGIP 8800 to our Web servers by redirecting customer login URL to our WEb servers via HTTPS using https_pool. How can i achieve this requirement using the existing virtual server.

 

 

Many thanks in advance for your time looking on my issues.
application delivery
dev
devops
iRules

2 Replies

  • L4L7_53191's avatar
    L4L7_53191
    Icon for Nimbostratus rankNimbostratus
    Aug 31, 2009
    This shouldn't be a problem. Have a look here for some of your options: http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=14536

    In particular, look at hoolio's first example which shows you how to selectively disable ssl (you can just as easily *enable* it as well) based on uri: 

     
  Pasted from http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=14536 
 when HTTP_REQUEST { 
  
     Check if request matches the criteria to disable server-side SSL 
    if { [HTTP::uri] starts_with "/clear"}{ 
  
        disable SSL on the serverside context 
       SSL::disable serverside 
  
        select the http pool 
       pool http_pool 
  
    } else { 
        default is to use server-side SSL and the https pool 
       pool https_pool 
    } 
 }

    Be sure and read the whole thread as it's got a bunch of good stuff in it and it'll give you a feel for some of the options available to you.

    -Matt

  • Jhunclaudio_106's avatar
    Jhunclaudio_106
    Icon for Nimbostratus rankNimbostratus
    Aug 31, 2009
    Thanks Matt for the response, I will try to create an irule that have a similar setup and do testing.

     

     

    Give you feedback on the result.

     

     

    Regards