For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bill_Jensen's avatar
Bill_Jensen
Icon for Nimbostratus rankNimbostratus
Jan 24, 2017

ssl offload server but scrambles web page

We ssl offload our nagios.drake.edu server but it scrambles the web page when we log in. If we hit the web page without going through the F5 it doesn't scramble the web page. What configuration change do I need to make in the F5 so it doesn't scramble the web page?

 

4 Replies

  • It looks like I need to have a rewrite of the http to https but where do I do the rewrite?

     

  • I ended up using this iRule and it is working properly again. when HTTP_REQUEST {

     

     Save the requested host value
    set host [string tolower [HTTP::host]]
    
     If the HTTP host header is blank, use the VS IP address
     If the VS IP is not routable for clients, hard code a routable IP
     to replace [IP::local_addr]
    if {$host eq ""}{set host [IP::local_addr]}
    
     Disable the stream filter by default
    STREAM::disable

    } when HTTP_RESPONSE {

     

     Check if response type is text and host isn't null
    if {[HTTP::header value Content-Type] contains "text" and $host ne ""}{
    
         Replace http://$host with https://$host
        STREAM::expression "@http://$host@https://$host@"
    
         Enable the stream filter for this response only
        STREAM::enable
    
    }
     Rewrite the Location header in redirects to https://
    if { [HTTP::is_redirect] && [string tolower [HTTP::header Location]] starts_with "http://$host"} {
        HTTP::header replace Location [string map -nocase "http://$host https://$host" [HTTP::header Location]]
    }

    }