For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

deni_22991's avatar
deni_22991
Icon for Nimbostratus rankNimbostratus
Jan 04, 2011

redirect to https multiple uri's while letting others pass through

I am trying to create an iRule that will force ssl on specific multiple URI's under a specific host while letting those that do not need SSL to pass through. I am working on BIG-IP 9.4.7 Build 320.1 ...
application delivery
dev
devops
iRules
deni_22991's avatar
deni_22991
Icon for Nimbostratus rankNimbostratus
Jan 07, 2011
Should this rule be applied to the https virtual server?

 

 

I tried bringing up the applications again, changed my 4th https: redirect so that I used http instead and in the log it showed

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/login.asp

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/textss.css

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/t3-trout.jpg

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/t5-deer.jpg

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/t2-mt-rush.jpg

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/t4-hunter.jpg

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/SD-Logo.gif

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/t6-pheasant.jpg

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/spacer.gif

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/gfp-logoSplitR.gif

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/t7-walleye.jpg

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/gfp-logoSplitL.gif

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/nav-c.gif

 

Fri Jan 7 11:46:32 CST 2011 tmm tmm[2048] Rule apps_withssl HTTP_REQUEST: User went to http://appsf5.sd.gov/applications/gf82/Images/nav-l.gif

 

 

Which shows it is hitting the first log, but does not go into the iRule any further to hit the second log at

 

"/applications/gf82*" { HTTP::redirect "https://[HTTP::host][HTTP::uri]"

 

log local0. "Requested http://[HTTP::host][HTTP::uri] and was redirected to https://[HTTP::host][HTTP::uri]" }