Forum Discussion
NimbostratusLTM https/http issue
Hi All, We're having an issue with f5 this is the behaviour.
From https: When thr uset login the traffic became http and we are having the error. But when we type manually the https the page is working.
Needed yor expertise, please
25 Replies
ekaleido_26616Cirrocumulus
You need to create a virtual using the same IP, but using port 80 and apply an http profile to it. Then apply the iRule named "_sys_https_redirect" to the virtual.
All http traffic will now we redirected to https.
NathCirrostratus
Hi ekal,
Already did that, we have 3 VS VS:80 VS:443 VS:50443
From Client -> VS:80 redirect -> VS:443 -> redirect -> 50443, website login page working. But once the user login the traffic became http.
- ekaleido_26616
Then the server(s) on the backend are doing the redirection.
- Nath
Hi Ekal,
How could we say that backend server is doing the http redirection? Even we have an SSL offloading at f5.
ekaleidoCirrus
You need to create a virtual using the same IP, but using port 80 and apply an http profile to it. Then apply the iRule named "_sys_https_redirect" to the virtual.
All http traffic will now we redirected to https.
- Nath
Hi ekal,
Already did that, we have 3 VS VS:80 VS:443 VS:50443
From Client -> VS:80 redirect -> VS:443 -> redirect -> 50443, website login page working. But once the user login the traffic became http.
- ekaleido
Then the server(s) on the backend are doing the redirection.
- Nath
Hi Ekal,
How could we say that backend server is doing the http redirection? Even we have an SSL offloading at f5.
Hem_669001.HTTP profile with redirect rewrite all parameter might help you keeping the request in https. This setting basically rewrites the URI in all HTTP redirect responses. Create a new HTTP profile from the current profile applied and test with this setting. Make sure you apply same new profile to all 3 vips. 2.You can sniff through response headers using IE Developer tools,Firebug,Fiddler Or HTTP analyzer and you'll know or you can guess which might be causing the redirect. Most of the cases it is app code that is designed to respond HTTP responses without SSL.
- Nath
Hi Hem,
This is a good recommendation no questions with the http will try that one. But on the app code, application keeps on telling me that it is expected since from bigip -> is http traffic or the SSL is being terminated.
Thanks again!
Will keep you posted.
- Nath
Hi Hem,
Just to update this thread. We are still encountering the issue.
-Nat
- keshav_163381
Please create a rewrite irule on LB and apply to your 3rd virtual servers. Once your servers will try to send http traffic LB change to http to https while sending the reply to client.
