SSL / Non-SSL Same VIP

Hi Hatem,

 

 

It sounds like you're implementing a pretty standard configuration with separate VIPs for HTTP and HTTPS. What you've described sounds correct. Though, you shouldn't need an iRule to select the decibel_rct_http_pool. You can just assign the pool as the default pool on the VIP.

 

 

Also, if the HTTP VIP was working prior to adding the HTTPS VIP, no changes should be necessary to the HTTP VIP. If you remove the iRule and specify the pool, but the requests fail, can you post an anonymized copy of the VIPs and pools from the /config/bigip.conf file?

 

 

Lastly, if the initial request to the HTTPS VIP is being redirected to HTTP, you can enable rewrite redirects on the HTTP profile. You can create a custom HTTP profile, modify the rewrite redirects option and then select this for the HTTPS VIP. You can check the online help for details on the different rewrite redirects options.

 

 

Thanks,

 

Aaron