For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Desai_124243's avatar
Desai_124243
Icon for Nimbostratus rankNimbostratus
Jul 18, 2016

redirection 80 to 443 and http to https without creating pools and virtuals

Hi,

 

How can I create any http requests redirect/convert to https requests without creating 80 pools or virtual.

 

Any helps would be appricate

 

4 Replies

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus

    Well, not a redirect, but implementing "HTTP Strict Transport Security" will accomplish a similar result.

     

    It is supported out-of-box since v12.0.0. From the Release Notes of that version:

     

    HTTP Strict Transport Security (HSTS) functionality

     

    In this release, an HTTP profile provides HTTP Strict Transport Security (HSTS) settings that apply HSTS security functionality. This functionality requires all non-secure HTTP traffic to use secure HTTPS connections for both a domain (and optionally its subdomains) and persisting client HSTS security functionality, for a specified period.

     

    Or it can be implemented via an irule. See: https://devcentral.f5.com/articles/implementing-http-strict-transport-security-in-irules .

     

    Anyhow, this will at least draw your attention to the security issues of an HTTP->HTTPS redirect so frequently requested.

     

  • Thanks reply back. my virtual configuration is on Fastl4 and link is showing http_request irule which is not supported by fastl4. And we are using 10.2 version in F5. do u have any solution where I can keep fastl4 profile and implement redirection.

     

    Regards

     

  • Why do you want to retain FastL4 ? If you want to retain it, best option is to create VS listening on port 80 and use an iRule to redirect to HTTPS. Also, consider upgrading your code. F5's Software Support Policy - SOL5903

     

  • Fastl4 does not deal with application level processing. The HTTP is not seen by the proxy when FL4 is used. Because the http is not processed, you cannot redirect using http.