For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Janek_42109's avatar
Janek_42109
Icon for Nimbostratus rankNimbostratus
Sep 23, 2015

SSL redirection from HTTPS to 8443

Hi all,

I'm experiencing an issue this an URL redirection. I would like to redirect client request from https://foobar.com to https://foobar.com:8443/customuri

I have created two VS with SSL termination on the F5.

On the VS for HTTPS there is no pool associated to the VS just an iRule for the redirection. The iRule is the following : 


when HTTP_REQUEST {[
    [HTTP::redirect "https://foobar.com:8443/customuri"]]
}

When using a browser, i just got a blank page but with curl i have more details about the issue :

SSL read: error:00000000:lib(0):func(0):reason(0), errno 104

Futhermore, when i'm checking in the /var/log/ltm, i have also the following message :

err tmm2[16953]: 01220001:3: TCL error: /Common/URL_Redirect - invalid command name "" while executing "[HYPERLINK "http::redirect"HTTP::redirect "https://foobar.com:8443/customuri"]"

I have also an HTTP VS with no pool and the same iRule and it's working just fine.

Is anyone have an idea of what is wrong ?

Thank you

application delivery
deployment
devops
iRules
LTM

11 Replies

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 23, 2015

    Braces are useless...

    when HTTP_REQUEST {
    HTTP::redirect "https://foobar.com:8443/customuri"
}
  • Janek_42109's avatar
    Janek_42109
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2015

    Hello Stanislas,

     

    Indeed, i removed the braces but i still have the issue.

     

    Any idea ?

     

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Sep 23, 2015

    So just to clarify, the iRule syntax that Stanislas provided doesn't work? It's syntactically correct.

     

  • Janek_42109's avatar
    Janek_42109
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2015

    Hello Kevin,

     

    The iRule is syntactically correct but i still that the same behavior as mentioned in my first post.

     

  • Janek_42109's avatar
    Janek_42109
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2015

    Hello Brad,

     

    Yes i have.

     

    I have actually 3 separated VS on the same IP adress :

     

    • HTTP : No pool associated, irule redirection to the VS HTTPS/8443
    • HTTPS : No pool associated, irule redirection to the VS HTTPS/8443
    • HTTPS/8443 : Pool with the server
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 23, 2015

    Hi,

     

    your https virtual server configuration must be the same as HTTP virtual server except clientssl profile enabled.

     

  • Janek_42109's avatar
    Janek_42109
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2015

    Hello Stanislas,

     

    They are actually like that.

     

    I'm just wondering if the issue is not related to the SSL itself because of the error message that i have.

     

    Is it actually possible to make an SSL Termination on the F5 with no pool associated ?