For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PiotrL's avatar
PiotrL
Icon for Cirrus rankCirrus
Mar 14, 2019

Serverside https and http mixed connections

For one URI requests go to a https server (server ssl profile is on), for different URI requests should go to a http server (server ssl is off).

 

The problem comes up when first request goes to a https server and next request should go to a http server. Our ltm is wrongly trying to pass the request in the tcp session to https server, and after many seconds the request eventually goes as expected to a http server (when new clientside https session is set up). This causes long delays when loading some objects from a http server.

 

How can I force the ltm to route the request to a http server without delay ?

 

(Oneconnect profile is off, version 14.1.0.2)

 

3 Replies

  • How are you checking different URIs, are you using a policy or an iRule? Are you able to share your config?

     

  • You may need to add an LB::detach command before changing the pool you are using. It is possible that the load balancing decision is being made before the HTTP_REQUEST event is triggering meaning that it will only change when another tcp connection comes in and the load balancing decision is re-evaluated.

     

  • I always use a LTM policy. Everyting is workng fine there. Also with 14.1.0.2

     

    So our setup: create a https virtual server with default server ssl profile and oneconnect enabled.

     

    Add a LTM policy and create a rule with URI mapping, destination pool and serverssl disabled, if necessary. If you want, create a default rule for forwarding to your default pool, but thats not necessary.

     

    We always add a default pool. Without, the virtual server has status unknown.

     

    Thats it.

     

    We are fresh on 14.1.0.2, but I don't see any trouble at the moment.