Forum Discussion

HSarj's avatar
HSarj
Icon for Altostratus rankAltostratus
Jan 31, 2023

need help with url\uri rewrite to pass username

Would appreciate any assistance on this please - I am a newbie on F5 LTM

We have an application that passes the below to the F5. We would like this to go directly to the servers\nodes in the pool without any modification as is (full url), inlcuding the username. Is this possible? or would we need to rewrite url path without redirection using irule.

The example path is https://Testserver:8080/MFA/SCImage?username=UserA

Any help would be much appreciated.

  • Thanks for your assistance Hooni_L.

    In the end the issue was due to routing and worked with F5 support. We added a floating Self IP for the vlan and that resolved the issue. 

  • Hi,

    Can you explain it in more detail?
    F5 does not change url path, parameter by default.
    if you explain more detail, I can help you.
    • HSarj's avatar
      HSarj
      Icon for Altostratus rankAltostratus

      Hi,

      Thank you for helping with this.

      We are trying to load balance our Swivel Pinsafe appliances and we have created the virtual server, pool & nodes and configured for round robin. We want the F5 to just pass the SSL traffic to the nodes in the pool.

      Virtual server: https://Swivel:8080/MFA/SCImage?username=UserA - does the F5 pass this full path\uri to the nodes in the pool? or would it only pass https://Swivel:8080 to them.

      We do not intend to place the SSL certificate on the F5 or do we have to do this? we have not created any SSL client or server profiles either.

      Hope above helps. Please let me know if there are any specific questions and really appreciate your help.

       

      • Hooni_L's avatar
        Hooni_L
        Icon for Cirrus rankCirrus

        Hi, 

        you don't need ssl termination on F5 device, right?

        Have you tried performance L4?

        I think there will be no problem if I make it with performance L4.

        PerformanceL4 passthrought to node(pool member) when incoming traffic.

        SSL service on port 8080 is not a problem.

        If you have any questions, let me know.

        thanks