Rediect http to https on a non-standard port when LTM has the SSL Client profile

This iRule cannot work as described. HTTP::uri only contains the URI, which means only the part after the host within the URL. There will never be a scheme, which may be processed by URI::protocol. In the F5 docs the word URI is often mixed up with URL, which is just wrong. So in the docs for URI::protocol it needs "uri" as parameter, but in the exmaples URLs are given in a list. HTTP::uri will not work here.

I've did some tests in my lab (TMOS 13.1.x) to proove this behavior, because I needed this behavior. I came up with the following iRule:

when CLIENT_ACCEPTED {
set DEBUG 1
set ConnectionProtocol "http"
}

when CLIENTSSL_HANDSHAKE {
set ConnectionProtocol "https"
}

when HTTP_REQUEST {
if { $ConnectionProtocol eq "http" } {
    if {$DEBUG} {log local0. "Redirecting non-SSL connection (Check: $ConnectionProtocol) for [HTTP::host] on URI [HTTP::uri] to HTTPS."}
    HTTP::redirect https://[getfield [HTTP::host] ":" 1]:[TCP::local_port][HTTP::uri]
} 
else {
    if {$DEBUG} {log local0. "SSL connection ($ConnectionProtocol) for [HTTP::host] on URI [HTTP::uri]. No action required."}
}
}

This works perfectly for me.

Cheers,

svs