Forum Discussion
ssl offload server but scrambles web page
We ssl offload our nagios.drake.edu server but it scrambles the web page when we log in. If we hit the web page without going through the F5 it doesn't scramble the web page. What configuration change do I need to make in the F5 so it doesn't scramble the web page?
4 Replies
- Bill_Jensen
Nimbostratus
Comparing the page source, I get this blocked error
[blocked] The page at https://nagios.drake.edu/nagiosxi/login.php?redirect=/nagiosxi/index.php%3f&noauth=1 was not allowed to run insecure content from http://nagios.drake.edu/nagiosxi/includes/css/font-awesome.min.css?1455902749.
- Bill_Jensen
Nimbostratus
It looks like I need to have a rewrite of the http to https but where do I do the rewrite?
- ekaleido
Cirrus
There should be an option in Nagios to not require https.
- Bill_Jensen
Nimbostratus
I ended up using this iRule and it is working properly again. when HTTP_REQUEST {
Save the requested host value set host [string tolower [HTTP::host]] If the HTTP host header is blank, use the VS IP address If the VS IP is not routable for clients, hard code a routable IP to replace [IP::local_addr] if {$host eq ""}{set host [IP::local_addr]} Disable the stream filter by default STREAM::disable} when HTTP_RESPONSE {
Check if response type is text and host isn't null if {[HTTP::header value Content-Type] contains "text" and $host ne ""}{ Replace http://$host with https://$host STREAM::expression "@http://$host@https://$host@" Enable the stream filter for this response only STREAM::enable } Rewrite the Location header in redirects to https:// if { [HTTP::is_redirect] && [string tolower [HTTP::header Location]] starts_with "http://$host"} { HTTP::header replace Location [string map -nocase "http://$host https://$host" [HTTP::header Location]] }}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com