Forum Discussion
avdes_200844
Nimbostratus
NimbostratusIs using iRule a good practice?
Hi,
In one of our app deployments, We are using a F5 load balancer with SSS offloading. We have created an iRule in F5 LB to rewrite all HTTP rediect urls(receieved by LB in HTTP response from applic...
JG
Cumulonimbus
CumulonimbusOK, if there is a consideration of running the app over HTTP in future, then there is no need for concern of security at all. But why are you running it over HTTPS now?
Back to the issue at hand, in the case of SSL offloading, I think the best solution is to pass an HTTP header "X-Forwarded-Proto: https" to the backend application, which will then be able to determine which scheme to use when constructing a self-referencing URL. This standard header can be configured in an http profile.
