For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Angel_Lopez_116's avatar
Angel_Lopez_116
Icon for Altostratus rankAltostratus
May 07, 2014

Redirect traffic to one VS to another

I've been asked to redirect access to a VS to another one. The problem here is that the target VS is an HTTPS VS and the BIG-IP doesn't open the SSL so I can't configure an HTTP 301 redirect.   I'...
application delivery
iptables
LTM
redirect
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 07, 2014

I didn't actually intend to say "layer virtual server" - that was a typo. I simply meant a standard virtual server. In this case the VIP's destination would be 10.30.205.251:443, your pool would contain on member (10.30.205.252:443), and you'd need to apply a SNAT profile (Automap will do). This is assuming that .251 is a VIP address and .252 is a server address. If both are VIP addresses, then you would actually need to do a "layered VIP" approach. In the first VIP, just create your destination IP:port and the following iRule:

when CLIENT_ACCEPTED {
    virtual internal_vs
}

where "internal_vs" would be the physical name of the other VIP (.252).