For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_Curl_105786's avatar
Joe_Curl_105786
Icon for Nimbostratus rankNimbostratus
Apr 04, 2014

Redirect To Website

I have a case where we have an application that we can not do SSL offload for but I need to redirect to a site down page if the pool is unavailable. I tried the rule below but since I have no http profile applied to the VIP it does not understand the HTTP::redirect commnad. Any one have any suggestions on how to do this when no http profile is applied? Thanks

 

Joe

 

when LB_FAILED { HTTP::redirect "http://nrdcsd.app.medcity.net/" }

 

application delivery
availability
design
devops
iRules
LTM

1 Reply

  • giltjr's avatar
    giltjr
    Icon for Nimbostratus rankNimbostratus
    Apr 04, 2014

    I don't think you can. Since the connection is encrypted and the F5 knows nothing about what is inside the connection, it can not insert any HTTP functions. Only two ways I can think of. Both invloved sending them to a http server that will accept the same SSL server and send a "out of service" page no matter what the URI.

    Method one would be to add the "out of service" server to the current pool, but use priority groups so that it is only selected when all of the other servers are down.

    Method two is put this in your iRule:

    when CLIENT_ACCEPTED {
      if { [active_members current_pool] == 0 } {
        pool where_you_want_them_to_go
      }
    }