Forum Discussion
tobin_dax_93013
Nimbostratus
NimbostratusRedirection to SSL based pool using switch -glob
Hi
I am new to f5 and irules so i apologise in advance for any stupid utterence's
I have a virtual server listening on port 80 which am trying to apply the following irule to. the logic is that when the vs recieves a uri which matches "/s007v1.0/" it will send the request to a pool listening on port 443. I have configured an ssl server profile and configure serverside ssl on the vs. If the vs recieves anything it should send the traffic to the a pool listening on port 80. I can see the log local0. entries in the F5's log's when it receives requests and it does seem to be processing them properly, however the traffic statistics for the ssl pool are 0, the iis server logs see that requests to the /s007v1.00 virtual directory are receieved on port 80.
is my logic flawed ? is there any other mechanisms i can use to try and debug this futher ? any assistance is appricated.
when HTTP_REQUEST {
log local0. "Request: [HTTP::uri]"
switch -glob [HTTP::uri] {
"/S007v1.0/*" {
log local0. "Sending Request to HTTPS Pool"
pool Web_Server_Pool_443
}
default {
log local0. "Sending Request to Http Pool"
SSL::disable serverside
pool Web_Server_Pool
}
}
hoolioCirrostratus
Do you have (destination) port translation enabled on the virtual server? If you remove the iRule, add the 443 pool as the default pool on the VS and make a request to a URI which is served by the 443 pool, does it work? If not, that would be the issue to focus on.
Aaron- tobin_dax_93013HI Aaron
I had reached those same conclusions myself, sadly no success, however my investigations had discovered that the iis server's aren't responding to ssl, (even though my server teams had give me assurances that was all working) we will now try to resolve this problem and see if the irule works after we know the servers are responding to ssl correctly. - hoolioNice work. I'd expect the iRule to work once the server is set up correctly to respond to HTTPS requests.
Aaron