Forum Discussion
AltostratusRewrite HTTPS to HTTP preserving HTTPS in the URL
Hi,
Are we able to use a pool listening on port 80 on a HTTPS VS listener.
What we want is to keep the URL secured in https while the traffic will be served from a pool running on port 80
Is this doable ?
7 Replies
MiLK_MaNNimbostratus
So you want to have SSL on the clientside, but decrypt on the backend?
If so, this is called SSL offload and is a very easy thing to do by having a clientside SSL profile but not putting one on the serverside.
The only thing to watch out for are embedded URL references in your HTML code, or Location headers that don't include https:// schema.
- Moinul_RonyI can confirm that the URL references will be unchanged and be still on http:// .. Can you point me to any documentation that shows a optimal way of SSL offloading from a HTTPS VS to a HTTP Pool ? Thanks.
- MiLK_MaNAre the URL references relative (ie. /path/file.html) or definitive (eg. http://host.com/path/file.html)? If it's the latter, you will need a stream profile similar to what has been described in this devcentral post: https://devcentral.f5.com/questions/irule-for-rewriting-http-request-with-https-request
MiLK_MaN_61922So you want to have SSL on the clientside, but decrypt on the backend?
If so, this is called SSL offload and is a very easy thing to do by having a clientside SSL profile but not putting one on the serverside.
The only thing to watch out for are embedded URL references in your HTML code, or Location headers that don't include https:// schema.
- Moinul_RonyI can confirm that the URL references will be unchanged and be still on http:// .. Can you point me to any documentation that shows a optimal way of SSL offloading from a HTTPS VS to a HTTP Pool ? Thanks.
- MiLK_MaN_61922Are the URL references relative (ie. /path/file.html) or definitive (eg. http://host.com/path/file.html)? If it's the latter, you will need a stream profile similar to what has been described in this devcentral post: https://devcentral.f5.com/questions/irule-for-rewriting-http-request-with-https-request
Alex_Dominic_SaI added the rule this time no response from the VIP only :-(
