For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

escman's avatar
escman
Icon for Cirrus rankCirrus
Sep 29, 2022
Solved

STREAM profile (HTTP > HTTPS) with host exception

Hello guys, I do need to add a exception into the default stream irule (HTTP to HTTPS) to bypass the www.w3.org domain: I got this iRule: when HTTP_REQUEST { STREAM::disable HTTP::header remo...
application delivery
stream
  • escman's avatar
    escman
    Oct 20, 2022

    Hi Enes,

    I done it explict instead use only "http" > "https"  (the real domain http://domain.com to https://domain.com) and works fine!

    Thank you 🙂

escman's avatar
escman
Icon for Cirrus rankCirrus
Oct 14, 2022

Hi sir,

I already tried to skip svg files but also there are alot of javascript codes running at page (note that the server is entire HTTP due ssloffload) and, the issue releated with the svg/png objects works fine but some javascript elements just do not occur probaly due stream profile. I dont know if its right to bypass the javascript because its showed as MIME text/html at content response and the first "if" will trigger... I don't know if it's correct, however, its possible to change all "HTTP" references in the application code to null (like change http://domain.com to domain.com), and leave like a hybrid request? and then let the browser interpret the correct protocol.

  • Leslie_Hubertus's avatar
    Leslie_Hubertus
    Ret. Employee
    Oct 26, 2022

    Hi escman , it looks like Enes_Afsin_Al  hasn't had a chance to come back to answer your follow-up, so I'll see if I can find a colleague to jump in to help.