Forum Discussion
NimbostratusRedirection to https failing in IE 11
Hi All
I used the below configuration for redirecting http services with custom port to https
1) Create SSL Client profile with allowing Non-SSL Connections ( You need to modify default config)
2) Create VIP with 8888 port and use SSL client profile
3) Configure below iRule
when HTTP_REQUEST {
if { [URI::protocol [HTTP::uri]] eq "http" } {
HTTP::redirect https://[getfield [HTTP::host] ":" 1]:[TCP::local_port][HTTP::uri] }
}
It works fine in IE 9 , chrome but on IE 11, till the login page of application, it is doing redirection to http but after logging in , it goes to http.
Has any one faced this on IE 11 ?
Also, when i take 'inspect element ' on IE 11 browser or use fiddler, it redirects http to https successfully even after logging in -its https throughout.
I tried changing the user agent in IE11 to IE 9 and tested , it still http, after logging into application.
Please do let me know if you have any idea as to what is happening.
2 Replies
Stanislas_Piro2Cumulonimbus
Hi,
how can it work with ie9. this is the question.
when you access
the request ishttp://www.abc.comGET / HTTP/1.1 Host : www.abc.com ...The HTTP::uri returns the string between GET and HTTP/1.1 which may not contain protocol. (it is supported by HTTP protocol but not the default browser behavior)
there are some irules to do it : look at https://devcentral.f5.com/questions/http-to-https-redirect-on-non-standard-port
dragonflymrCirrostratus
Hi,
Is there any specific reason for doing it with one VS and Non-SSL Connections mod in clientssl profile instead of classic two VS solution with http VS redirecting to https VS?
Anyway, I doubt it's BIG-IP issue, rather IE11 bug/feature. You should compare traces from IE9 connection to IE11 connection. Especially important is who is resetting or closing connection - BIG-IP or IE11
If there are no differences then it means that IE11 is somehow differently reacting to this kinds of redirects.
Piotr
