Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Randy_Johnson_L's avatar
Randy_Johnson_L
Icon for Nimbostratus rankNimbostratus
Nov 29, 2018

Redirect HTTPS request to Second HTTPS server, before SSL

I've seen a number of questions like this in the various forums, but I just cannot seem to make this work. Use case is to use an iRule to perform a redirection from a request for 'http://server.serve...
application delivery
big-ip
irules
security
stan_piron's avatar
stan_piron
Icon for Cumulonimbus rankCumulonimbus
Nov 29, 2018

Hi,

 

Https is http protocol inside tls tunnel...

 

Http redirect requires the http request received by the server (bigip there)

 

Https flow is the following

 

  1. Tcp handshake to tcp port 443
  2. TLS handshake initiated by the client
    1. client send client hello
    2. server send certificate
    3. Next tls handshake packets ...
  3. Client send request
  4. Server respond with a 302 respond code and location header which contains new url...

So you can see this is not possible to redirect before certificate validation (hopefully... this should be a huge security issue if we can!!!)