For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SK74_347537's avatar
SK74_347537
Icon for Nimbostratus rankNimbostratus
Mar 15, 2018

Replacing the protocol from http to https for certain domain

I am trying to replace the protocol of the Location from http to https for certain domains(url) with iRules but getting error with it. when HTTP_RESPONSE { if { ( [HTTP::header exists Location...
application delivery
iRules
oguzy's avatar
oguzy
Icon for Cirrostratus rankCirrostratus
Mar 15, 2018

Hi SK74,

class match filter should be in brackets like this.

    when HTTP_RESPONSE {
        if { ( [HTTP::header exists Location] ) and ( [HTTP::header Location] contains "http://" ) and ( [ class match [HTTP::header Location] contains ssl-domain-data-group ] ) } {
            HTTP::header replace [string map -nocase {"http://" "https://"} [HTTP::header Location]]
        }
    }

Also you can try the below one:

    when HTTP_RESPONSE {
        if { [HTTP::header exists Location] } {
           set location_info [HTTP::header Location]
           if { ( $location_info contains "http://" ) and ( [class match $location_info contains ssl-domain-data-group ] ) } {
               HTTP::header replace [string map -nocase {"http://" "https://"} $location_info]]
           }
        }
    }
  • SK74_347537's avatar
    SK74_347537
    Icon for Nimbostratus rankNimbostratus
    Mar 23, 2018

    Problem solved! Thanks for the help, really appreciate it. Need to add "Location" before replace to correctly modify the HTTP header.

    when HTTP_RESPONSE {
    if { ( [HTTP::header exists Location] ) and ( [HTTP::header Location] contains "http://" ) and ( [ class match [HTTP::header Location] contains ssl-domain-data-group ] ) } {
        HTTP::header Location replace [string map -nocase {"http://" "https://"} [HTTP::header Location]]
    }
}