Forum Discussion
Gary_Walderich_
Nimbostratus
NimbostratusMasking/Hiding original URL?
I am currently working on configuring a BigIP within an SAP environment, and need to know if I can mask/hide the original URL with a standard URL. Reason, I do not want users to know the entire URL address along with the SAP port and directories that is being used to access the SAP servers.
I currently have a Virtual server located on SAP port 50100 over https using a client ssl profile. The virtual server then connects to a pool with a single SAP server over port 50100 over http.
Right now, to get to the virtual server you have to go to the following: https://users.test.com:50100/irj/portal. What I would like to see is https://users.test.com within the URL. Can this be done with an iRule, and if so, how? Again, what my goal is, is to keep the original URL hidden /Masked from users, to make it look like a normal address.
Current BigIP code I am utilizing on the LTM is 9.4.
Many Thanks!
-GW
13 Replies
hoolioCirrostratus
A thought...
The GET request for ":50100/irj/portal/" could have followed a redirect from the server being rewritten from "/" to ":50100/irj/portal/". The Location header per RFC2616 must contain an absolute URI, but maybe this app uses a relative URI of "/"? If it did, the string map command would rewrite the redirect to the URI you're seeing the client request.
ftp://ftp.rfc-editor.org/in-notes/rfc2616.txt
14.30 Location
The Location response-header field is used to redirect the recipient
to a location other than the Request-URI for completion of the
request or identification of a new resource. For 201 (Created)
responses, the Location is that of the new resource which was created
by the request. For 3xx responses, the location SHOULD indicate the
server's preferred URI for automatic redirection to the resource.
The field value consists of a single absolute URI.
Aaron- I know it was baffling me last night, and I was pretty tired... but doesn't the string map I used remove all instances of ":50100/irj/portal" from an outbound redirect? I just don't see what logic in the iRule could have created such a URI.
I would love to see concurrent traces, logs, and HTTPwatch/LiveHeaders output from the client, because I'm obviously missing somehting.
/deb 
Gary_Walderich_Well, implemented everything again tonight, and still the same issue.
I also turned on HTTP Watch, and nothing was logged. I was getting a server rejected error. This is really weird.....
