For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bertrand_9354's avatar
bertrand_9354
Icon for Nimbostratus rankNimbostratus
Jan 27, 2012

rewriting location header from server

Hi everybody,     I have an application on which my client connect to F5 on https and the F5 decrypt to server. The problem is my server (in response) is sending to F5 for each request an301 re...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 30, 2012

e.g.

 

[root@ve1023:Active] config  b virtual bar list
virtual bar {
   snat automap
   pool foo
   destination 172.28.19.79:443
   ip protocol 6
   profiles {
      clientssl {
         clientside
      }
      http {}
      tcp {}
   }
}
[root@ve1023:Active] config  b pool foo list
pool foo {
   members 200.200.200.101:80 {}
}

[root@ve1023:Active] config  curl -Ik https://toto.net/
HTTP/1.1 302 Found
Date: Mon, 30 Jan 2012 14:56:58 GMT
Server: Apache/2.2.3 (CentOS)
Location: http://toto/index.htm
Content-Type: text/html; charset=iso-8859-1

[root@ve1023:Active] config  b rule myrule list
rule myrule {
   when HTTP_RESPONSE {
        if {[HTTP::is_redirect]}{
                HTTP::header replace Location [string map {"http://toto" "https://toto.net"} [HTTP::header Location]]
        }
}
}
[root@ve1023:Active] config  b virtual bar rule myrule
[root@ve1023:Active] config  curl -Ik https://toto.net/
HTTP/1.1 302 Found
Date: Mon, 30 Jan 2012 14:57:15 GMT
Server: Apache/2.2.3 (CentOS)
Location: https://toto.net/index.htm
Content-Type: text/html; charset=iso-8859-1