For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jure_48098's avatar
Jure_48098
Icon for Nimbostratus rankNimbostratus
Feb 15, 2008

SSL login redirect

I have a site that I'm tryng to migrate to LTM, that is running HTTP and HTTPS. The login POST always goes to the SSL server. Server then does the auhorisation and returns a HTTP 302 redirect with the...
application delivery
dev
devops
iRules
Jure_48098's avatar
Jure_48098
Icon for Nimbostratus rankNimbostratus
Feb 15, 2008
The login goes always to the same URI.

 

 

The login is a POST and if the referrer is a https, the response from the server is a real server IP + some nonstandard port, which gets translated by the apache proxy. If the referer was a http://, then the server returns a valid URL, so the proxy doesn't do any translations..

 

 

HTTPS -> 302 Location: http://real.server.ip:port/URI (gets translated to https://FQDN/URI)

 

HTTP -> 302 Location: http://FQDN/URI