For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bill_Jensen's avatar
Bill_Jensen
Icon for Nimbostratus rankNimbostratus
Jan 24, 2017

ssl offload server but scrambles web page

We ssl offload our nagios.drake.edu server but it scrambles the web page when we log in. If we hit the web page without going through the F5 it doesn't scramble the web page. What configuration chan...
application delivery
LTM
Bill_Jensen's avatar
Bill_Jensen
Icon for Nimbostratus rankNimbostratus
Jan 24, 2017

I ended up using this iRule and it is working properly again. when HTTP_REQUEST {

 

 Save the requested host value
set host [string tolower [HTTP::host]]

 If the HTTP host header is blank, use the VS IP address
 If the VS IP is not routable for clients, hard code a routable IP
 to replace [IP::local_addr]
if {$host eq ""}{set host [IP::local_addr]}

 Disable the stream filter by default
STREAM::disable

} when HTTP_RESPONSE {

 

 Check if response type is text and host isn't null
if {[HTTP::header value Content-Type] contains "text" and $host ne ""}{

     Replace http://$host with https://$host
    STREAM::expression "@http://$host@https://$host@"

     Enable the stream filter for this response only
    STREAM::enable

}
 Rewrite the Location header in redirects to https://
if { [HTTP::is_redirect] && [string tolower [HTTP::header Location]] starts_with "http://$host"} {
    HTTP::header replace Location [string map -nocase "http://$host https://$host" [HTTP::header Location]]
}

}