For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

gizmo_240301's avatar
gizmo_240301
Icon for Nimbostratus rankNimbostratus
Dec 23, 2015

Masking URL on browser

I have a VIP, which runs an https page and calls other 8 VIPs. And that 8 VIPs redirect this https page, add port numbers and also load balances 8 servers with 8 different port numbers. For example, ...
BIG-IP
iRules
security
stream
url
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 07, 2016

Hi Gizmo,

If you want to hide the visible URL in your browsers location bar, then you could replace the initial redirect with a [HTTP::respond 200], delivering a simple HTML page containing a ... as a wrapper for the individual login pages.

https://en.wikipedia.org/wiki/HTML_elementFrames

In this case the browser bar would just stick to the URL of the wrapper, so that the URLs within the </code> would become hidden from end users. But this technique should be considered as a "dirty hack" since it has some usage limitations and also compability issues...BTW: Keep in mind, when using <code><iFrame></code> you may have to inject/replace <code>Access-Control-Allow-Origin</code> headers to the individual login sites, so that your TCP:443 site is allowed to <code><iFrame></code> the TCP:946X pages.

Cheers, Kai