Forum Discussion
Brian_Goldberg_
Nimbostratus
NimbostratusSSL to SSL redirection fails
I'm trying to create an iRule to redirect one URI to another. I need to redirect this URI:
www.abc.com/EPN
to:
www.abc.com/Members/EPN.aspx
I created this iRule
when HTTP_REQUEST {
if { [HTTP::uri] equals "/EPN" } {
HTTP::redirect "https://www.abc.com/Members/EPN.aspx"
}
My problem is that when I go to the page "www.abc.com/EPN" my browser gives me a "Server Reset" notice. I think something about the SSL is causing trouble.
Does anyone have any solutions?
5 Replies
kckirwan_49724My .02
Another option that has worked for me in the past is the ends_with stmnt instead of equals. Unless I'm mistaken you won't match with the stmnt you have coded above.
ie.
when HTTP_REQUEST {
if {[HTTP::uri] ends_with "EPN"} {
HTTP::redirect "https://www.abc.com/Members/EPN.aspx"
}
Hope that helps!
Kevin- Usually a server reset is because the service requested is not running.
Can you connect to the URL https://www.abc.com/Members/EPN.aspx without a problem?
/deb 
Brian_Goldberg_The service is running.
I have a Virtual Server created on port 443 with an SSL cert and everything. You can type https://www.abc.com/Members/EPN.aspx and go right to the page.
/Brian- I'm getting a RST on the SYN when I browse to that URL. You will need to figure out why the connection request is rejected. Either LTM is not configured correctly, or something between is blocking the request.
You can test from the LTM command line using cURL:
or if your LTM can't resolve the name:curl -k https://www.abc.com/Members/EPN.aspx
If you receive the expected page rather than a RST, then you know the LTM config is OK, and will then need to test from a hop further away until you find the point of failure.curl -k https:///Members/EPN.aspx
HTH
/deb - Brian_Goldberg_/deb
Sorry I didnt mention this before. The URL www.abc.com is a phony name. My client does not allow us to make message board post that indicate their technology.
I went ahead and just re-wrote the URI going to the server. It works (but the client doesnt see it because it happens between the F5 and the web server).
/brian
