Forum Discussion

Martin_Kaiser_1's avatar
Martin_Kaiser_1
Icon for Nimbostratus rankNimbostratus
May 18, 2011

Redirect http client to https on same non-default port

Hi guys,     I have a customer request of which I'm unsure whether it can be done at all or not:     I have a virtual https server on a BigIP running 10.2.0HF2. The virtual server is not r...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
May 23, 2011
Can you add the logging back in to see what is being triggered in the iRule? Is it possible that the cipher is TLS and therefore not matching your check of the cipher version containing SSL? 

when HTTP_REQUEST {
    enable "accept non-SSL connections" option in clientssl profile to use this iRule
   log local0. "[IP::client_addr]:[TCP::client_port]: cipher name: [SSL::cipher name], version: [SSL::cipher version], bits: [SSL::cipher bits]"
   if { not ( [SSL::cipher version] contains "SSL" ) } {
    HTTP::redirect https://[HTTP::host]:[TCP::local_port][HTTP::uri]
  }
}

Aaron