Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

3 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    KP

     

     

    Could this work:

     

     

    when HTTP_REQUEST {

     

     

    Check if the host starts with www.

     

    if {[string tolower [HTTP::host]] starts_with "www."}{

     

     

    Redirect with the www. prefix removed to the same URI

     

    HTTP::redirect "https://[string range [HTTP::host] 4 end][HTTP::uri]"

     

     

    } else {

     

     

    Redirect to https for http://host.domain.pl

     

    HTTP::redirect "https://[HTTP::host][HTTP::uri]"

     

     

    }

     

    }

     

     

    First bit re www taken from: https://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/1178449/showtab/groupforums/Default.aspx

     

     

    Hope this helps

     

    N
  • Hi nathan,

     

    Thanks for reply, yes, is't working, but still in one case had error:

     

     

    http://host.domain.pl - - > https://host.domain.pl - OK

     

    http://www.host.domain.pl - - > https://host.domain.pl - OK

     

    https://www.host.domain.pl - - > https://host.domain.pl - WRONG - certificate error :-/

     

     

    KP.
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    KP

     

     

    If you check this post, which is exactly like yours, a Devcentral MVP suggests another cert on a VIP or a wildcard cert instead.

     

     

    https://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/813956/showtab/groupforums/Default.aspx

     

     

    Rgds

     

    N