For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Corey_Webb_9791's avatar
Corey_Webb_9791
Icon for Nimbostratus rankNimbostratus
Dec 18, 2007

Redirect HTTP to HTTPS without using HTTP_REQUEST trigger

I need to redirect traffic that comes to my VIP as http:\\x.y.z to https:\\x.y.z however since there is no actual HTTP_REQUEST triggered when the request comes in as http I need to trigger this redire...
application delivery
dev
devops
iRules
Leslie_South_55's avatar
Leslie_South_55
Icon for Nimbostratus rankNimbostratus
Jan 17, 2008
sorry for the double post, did not see page 2. also I set the port on the VS to * (forgot that step). Here is more log info as well as the HTTP header info.

 

 

HTTP HEADER

 

 

GET /pwdmgr/default.aspx HTTP/1.1

 

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

 

Accept-Language: en-us

 

Accept-Encoding: gzip, deflate

 

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1; .NET CLR 2.0.50727)

 

Host: 10.20.15.4

 

Connection: Keep-Alive

 

 

HTTP/1.0 302 Found

 

Location: https://10.20.15.4/pwdmgr/default.aspx

 

Server: BigIP

 

Connection: Keep-Alive

 

Content-Length: 0

 

 

GET /pwdmgr/default.aspx HTTP/1.1

 

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

 

Accept-Language: en-us

 

Accept-Encoding: gzip, deflate

 

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1; .NET CLR 2.0.50727)

 

Host: 10.20.15.4

 

Connection: Keep-Alive

 

 

 

 

BIGIP LOG

 

 

Jan 17 14:28:17 tmm tmm[938]: Rule rule_http2https-1vs : ---------------------------- Start -----------------------

 

-----

 

Jan 17 14:28:17 tmm tmm[938]: Rule rule_http2https-1vs : HTTP request from 10.20.47.82 to 10.20.15.4:80

 

Jan 17 14:28:17 tmm tmm[938]: Rule rule_http2https-1vs : Client SSL profile enabled on VIP. Disabling SSL

 

Jan 17 14:28:17 tmm tmm[938]: Rule rule_http2https-1vs : redirecting client 10.20.47.82 to https://10.20.15.4/pwdmgrle

 

novo/default.aspx

 

Jan 17 14:28:17 tmm tmm[938]: Rule rule_http2https-1vs : ---------------------------- Start -----------------------

 

-----

 

Jan 17 14:28:17 tmm tmm[938]: Rule rule_http2https-1vs : HTTPS request from 10.20.47.82 to 10.20.15.4:443

 

Jan 17 14:28:19 tmm tmm[938]: Rule rule_http2https-1vs : ---------------------------- Start -----------------------

 

-----

 

Jan 17 14:28:19 tmm tmm[938]: Rule rule_http2https-1vs : HTTPS request from 10.20.47.82 to 10.20.15.4:443

 

Jan 17 14:28:19 tmm tmm[938]: 01220001:3: TCL error: Rule rule_http2https-1vs - can't read "vip_http_port": no such v

 

ariable while executing "if { ($::redirect_http_to_https == 1 or ([info exists redirect_http_to_https] && $redirect_http_to_http

 

s)) and $vip_http_port==1}{ HTTP::redirec..."