For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

phipse's avatar
phipse
Icon for Altostratus rankAltostratus
Nov 05, 2020

Source IP redirect, change host, uri and change to 443

  I'm using BIG-IP LTM   I have a VIP on port 4001 taking external connections, this goes to a pool with a client SSL cert.   I am trying to "route" to a different destination based on the sourc...
application delivery
iRules
LTM
policies
policy
Replace
Lidev's avatar
Lidev
Icon for Nacreous rankNacreous
Nov 06, 2020

Hi phipse,

 

If you want to re-encrypts traffic on the server side by initiating a new SSL connection between the F5 BIG-IP and the web server add a SSL profile (Server) on your Virtual Server, eg severssl.

Despite this, all configuration seems OK.

 

Regards

 

  • phipse's avatar
    phipse
    Icon for Altostratus rankAltostratus
    Nov 06, 2020

    Hi Lidev,

     

    This isn't working. With the iRule I can not change the host entry in the URI, it just forwards the request as it is to the pool. However, the policy does seem to work, but I receive an error back from the Azure server, like it's receiving a GET request rather than a POST.

     

    Thank you

    • Lidev's avatar
      Lidev
      Icon for Nacreous rankNacreous
      Nov 06, 2020

      Sorry, I didn't specify that I just looked at the LTM policy part. I'm not a big fan of iRules, i prefer to go through an LTM policy when I have a choice.

      for HTTP method issue, it's necessary either to adjust the HTTP methods on the backend server or to modify the sent requests.

    • phipse's avatar
      phipse
      Icon for Altostratus rankAltostratus
      Nov 06, 2020

      Am I right in using the ssl server part? Something doesn't feel right as we don't normally use it on our VIPs.

      We're sending the body as a POST request.

    • Lidev's avatar
      Lidev
      Icon for Nacreous rankNacreous
      Nov 06, 2020

      It depends on what you want to do with TLS/SSL trafic ?

       

      SSL Offloading (clientssl profile/no serverssl profile on virtual server) terminates SSL at the F5 and the server side traffic is non-encrypted.

      SSL Bridging (clientssl profile and serverssl profile on virtual server) terminates SSL at the F5 and then re-encrypts traffic to the server side.