Forum Discussion

Sabeer_Ali_2389's avatar
Sabeer_Ali_2389
Icon for Altostratus rankAltostratus
Mar 08, 2016

ssl url rewrite in F5 ?

  1. We are migrating the VIP from cisco to ACE Load balancer
  2. ACE is configured for ssl URL rewrite

action-list type modify http GTOM-PROD-EXT-SSL-REWRITE ssl url rewrite location "inet.axa.com.sg"

 

  1. How we can configure the above ssl url rewrite in F5 ?

1 Reply

  • Typically best practice is to use URL redirect, which in-turn tells the client to come back with enctrypted url. This way it supports the HSTS also.

    You can achieve this by configuring two VIPS and select the irule

    _sys_https_redirect
    on non SSL VIP.

    when HTTP_REQUEST {
           HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]
        }