Forum Discussion

Andrew_Wilson_2's avatar
Andrew_Wilson_2
Icon for Nimbostratus rankNimbostratus
Sep 15, 2010

iRule/Stream Profile

Hi,

 

 

I'm hoping someone can point me in the right direction. Here's the basic issue:

 

 

We have an F5 in front of a Lotus application and we're doing some basic http to https redirects. However on certain pages we're receiving Explorer/Firefox http/https mixed content alerts. We have a TCP 443 virtual server that terminates the SSL, cleartext on backend. HTTP profile is configured to rewrite HTTP redirect responses to HTTPS type requests. This works. The problem is that a javascript has HTTP hard coded within it somewhere which means the client initiates the following request on TCP 80: GET /lotus/spellcheck/javascript/NG.js HTTP/1.1\r\n. What is really required is to rewrite all the HTTP links to HTTPS when rendering the page, therefore if you viewed the source of a page it wouldn’t have any HTTP links (and therefore there wouldn’t be any security alerts)

 

 

If anyone can point me in the right direction i'd really appreciate it.

 

application delivery
dev
devops
iRules
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Sep 20, 2010
    As your subject suggests, you can use a blank stream profile and a STREAM::expression based iRule to rewrite the response content. I'd suggest creating a test VS to try this on first if the existing VS is in production. You can check the STREAM::expression wiki page for examples to get started:

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/stream__expression

     

     

    Aaron