Forum Discussion

mwi's avatar
mwi
Icon for Cirrus rankCirrus
Nov 25, 2024

Problem with lets encrypt and redirect after update

Hi, we have updated our BigIP last week from 15.x to 17.1.1.4, since then we are not able to get certificates from lets encrypt, if there is the _sys_https_redirect iRule active on the Virtual Serve...
LTM
mwi's avatar
mwi
Icon for Cirrus rankCirrus

I cant merge them together, because not every Server needs an redirect, but i made a new redirect rule with  if {[HTTP::has_responded]} and this fixed my problem.

I would like to understand why this happens, in my head the server get an request, checks if the path starts with "/.well-known/acme-challenge/", if this is true, it tries to respond with the token. Then it tries to redirect, but fails because an response has already sent.

But why does the server respond with an connection reset by peer?

Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Nov 26, 2024

If an iRule throws an error the connections are reset by LTM. This is a default behavior of LTM. The iRule error is logged in /var/log/ltm and if you enable RST cause logging you should see the RST-Packet send from the F5.