For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Corey_Webb_9791's avatar
Corey_Webb_9791
Icon for Nimbostratus rankNimbostratus
Dec 18, 2007

Redirect HTTP to HTTPS without using HTTP_REQUEST trigger

I need to redirect traffic that comes to my VIP as http:\\x.y.z to https:\\x.y.z however since there is no actual HTTP_REQUEST triggered when the request comes in as http I need to trigger this redire...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Dec 19, 2007
Also, if you really want to, you can actually do this with a single virtual server. The configuration is slightly more complex compared with configuring one HTTP and one HTTPS virtual server, as it requires an iRule to handle the various scenarios.

 

 

To do this, create a single virtual server defined on port 0 (any) with a client SSL profile and an HTTP profile configured. The pool would be made up of web servers accepting HTTP only (port 80). You can then use an iRule to disable the client SSL profile for HTTP requests. Or you can enable the 'non-ssl' option on the client SSL profile to allow HTTP communication to the virtual server through the client SSL profile. You would also want to drop (ignore) or reject (send a TCP reset) to requests not on the HTTP or HTTPS ports. I added an example to the codeshare (Click here).

 

 

Aaron