Forum Discussion
Macaron
Nimbostratus
Jan 04, 2018Maintenance page without doing SSL bridging and using HTTP profile
I am trying to host a maintenance page on f5 itself using iFiles but I have been told that I have to do SSL bridging as I am using HTTP profile with the iRule to trigger the maintenance page via iFil...
nitass_89166
Noctilucent
Jan 04, 2018The problem is our business require traffic to be end to end encrypted for that I am using performanceL4 and after that I am not able to host maintenence page on f5 using iFiles as if I use http profile with perfomanceL4 then it breaks the connection. Is there a way that can be used to host a maintenence page on f5 using iFile.
may this be usable?
// config
[root@ve13a:Active:In Sync] config tmsh list ltm virtual bar
ltm virtual bar {
destination 172.28.24.10:443
mask 255.255.255.255
pool foo
profiles {
fastL4 { }
}
rules {
qux
}
source 0.0.0.0/0
source-address-translation {
type automap
}
translate-address enabled
translate-port enabled
vs-index 13
}
[root@ve13a:Active:In Sync] config tmsh list ltm pool foo
ltm pool foo {
members {
200.200.200.101:443 {
address 200.200.200.101
session monitor-enabled
state down
}
}
monitor fake
}
[root@ve13a:Active:In Sync] config tmsh list ltm rule qux
ltm rule qux {
when CLIENT_ACCEPTED {
if { [active_members [LB::server pool]] < 1 } {
virtual sorrypage
}
}
}
[root@ve13a:Active:In Sync] config tmsh list ltm virtual sorrypage
ltm virtual sorrypage {
destination 0.0.0.0:443
ip-protocol tcp
mask any
profiles {
clientssl {
context clientside
}
http { }
tcp { }
}
rules {
sorrypage_rule
}
source 0.0.0.0/0
translate-address disabled
translate-port enabled
vlans-enabled
vs-index 14
}
[root@ve13a:Active:In Sync] config tmsh list ltm rule sorrypage_rule
ltm rule sorrypage_rule {
when HTTP_REQUEST {
HTTP::respond 200 content "this is sorry page\n" noserver
}
}
// test
[root@centos1 ~] curl -ik https://172.28.24.10
HTTP/1.0 200 OK
Connection: Keep-Alive
Content-Length: 19
this is sorry page
Macaron
Nimbostratus
Jan 05, 2018Worked perfectly fine !!! Thank you
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects