For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Randy_Johnson_L's avatar
Randy_Johnson_L
Icon for Nimbostratus rankNimbostratus
Nov 29, 2018

Redirect HTTPS request to Second HTTPS server, before SSL

I've seen a number of questions like this in the various forums, but I just cannot seem to make this work. Use case is to use an iRule to perform a redirection from a request for 'http://server.serve...
application delivery
BIG-IP
iRules
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Nov 30, 2018

Hi,

 

Https is http protocol inside tls tunnel...

 

Http redirect requires the http request received by the server (bigip there)

 

Https flow is the following

 

  1. Tcp handshake to tcp port 443
  2. TLS handshake initiated by the client
    1. client send client hello
    2. server send certificate
    3. Next tls handshake packets ...
  3. Client send request
  4. Server respond with a 302 respond code and location header which contains new url...

So you can see this is not possible to redirect before certificate validation (hopefully... this should be a huge security issue if we can!!!)