Forum Discussion
phipse
Altostratus
AltostratusSource IP redirect, change host, uri and change to 443
I'm using BIG-IP LTM I have a VIP on port 4001 taking external connections, this goes to a pool with a client SSL cert. I am trying to "route" to a different destination based on the sourc...
Lidev
MVP
MVPHi phipse,
If you want to re-encrypts traffic on the server side by initiating a new SSL connection between the F5 BIG-IP and the web server add a SSL profile (Server) on your Virtual Server, eg severssl.
Despite this, all configuration seems OK.
Regards
phipseAltostratus
AltostratusHi Lidev,
This isn't working. With the iRule I can not change the host entry in the URI, it just forwards the request as it is to the pool. However, the policy does seem to work, but I receive an error back from the Azure server, like it's receiving a GET request rather than a POST.
Thank you
- Lidev
Sorry, I didn't specify that I just looked at the LTM policy part. I'm not a big fan of iRules, i prefer to go through an LTM policy when I have a choice.
for HTTP method issue, it's necessary either to adjust the HTTP methods on the backend server or to modify the sent requests.
- phipse
Am I right in using the ssl server part? Something doesn't feel right as we don't normally use it on our VIPs.
We're sending the body as a POST request.
- Lidev
It depends on what you want to do with TLS/SSL trafic ?
SSL Offloading (clientssl profile/no serverssl profile on virtual server) terminates SSL at the F5 and the server side traffic is non-encrypted.
SSL Bridging (clientssl profile and serverssl profile on virtual server) terminates SSL at the F5 and then re-encrypts traffic to the server side.