iRule to redirect

Here's what I suspect is happening, because it happens to us quite frequently. The key is understanding that tomcat doesn't have any idea that the client is using HTTPS. Tomcat is talking HTTP, so when he has redirects to send, he sends them as HTTP. When the client follows the redirect, the connection is reset or times out because you don't have an HTTP VIP.

 

 

This is pretty simple to diagnose with a network trace. If you don't want to mess with decrypting the SSL, just do a tcpdump between the LTM and tomcat. Capture the inbound client request and the response. I bet that will tell you what's happening. You could also simply create an HTTP VIP just to see if that fixes it, or apply and HTTP profile to the HTTPS VIP with the Redirect Rewrite profile option set to All.