For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard__Harlan's avatar
Richard__Harlan
Historic F5 Account
Jul 24, 2006

SSL offload with PHP

We have a Home grown PHP app that is now moveing behind our BigIP. We want to move all SSL processing of the Server and let the BigIP do it for us. The problem is in the PHP code they are useing $_SER...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 24, 2006
Is the only issue that the app uses HTTPS in links and redirects, if you use the BIG-IP to decrypt the SSL and send HTTP traffic to the app?

 

 

If so, I think you could either change the app to use relative links or hard code the app to use HTTPS. If this isn't possible, you could use a stream profile on the BIG-IP to rewrite the HTTP links in the content to HTTPS and rewrite the Location header in redirects using a rule.

 

 

If I'm missing something, please provide more detail on the issue(s) you find when having the BIG-IP decrypt the traffic.

 

 

Aaron