Forum Discussion
Chip_Anderson
Jul 06, 2005Nimbostratus
Unable to LoadBalance HTTPS requests
This iRule works fine for us:
use pool sslpool
but this iRule doesn't:
if (http_uri starts_with "/def/servlet") {
...
Jul 07, 2005
I don't see any issue with your iRule. There is no https_uri variable as https is a transport level configuration, not at the HTTP level.
You might try to throw in some logging to see if what you are expecting as input is actually coming in that way.
if (http_uri starts_with "/def/servlet") {
use pool ssl-servlets
log "matched host(" + http_host + "), uri(" + http_uri + ") by client(" + client_addr + ") : using ssl-servlets"
}
else {
use pool sslpool
log "didn't match host(" + http_host + "), uri(" + http_uri + ") by client(" + client_addr + ") : using sslpool"
}
If this shows that you are falling through to the "use pool sslpool" command and that is hanging, while the single-line iRule with that same command succeeds, then something is wrong and you should report that to F5 Product Technical support.
Most times though, some simple logging will help. The output will be in the "/var/log/bigip" file on the BIG-IP device.
Another question is whether you are terminating the ssl session on the BIG-IP or not. There may be some information that can't be obtained from the encrypted traffic without decrypting it first. You'll need to make sure that the nodes in both pools are either configured to for HTTP (if the BIG-IP is terminating the connection) or HTTPS if it's not.
Again, some simple logging should show any issues.
-Joe
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects