Forum Discussion
URL Based redirection
Geeks,
Below is my current setup
Virtual Server (IP 10.100.100.100)
Real Servers IP RND7 ( IP 10.100.100.1) all Https request for app with Domain Name RND14( IP 10.100.100.2) all Https request for app with Domain Name RND8 ( IP 10.100.100.3) all the http request for app with abc.com RND15 ( IP 10.100.100.4) all the http request for app with abc.com
I am having one requirement that Virutal server ( IP 10.100.100.100) should forward all the request to RND7 (10.100.100.1) and RND14 ( 10.100.100.2) for the under mentioned domain names & all other request should be forwarded to RND8 (10.100.100.3) and RND15(10.100.100.4). Kindly share your valuable suggestions-
A)https://www.abc.com/xyz/ B)https://www.abc.com/dhl C)https://www.hll.abc.com/ghi/
14 Replies
- Kevin_Stewart
Employee
Try this:
pool_A = 10.100.100.1 and 10.100.100.2
pool_B = 10.100.100.3 and 10.100.100.4
when HTTP_REQUEST { switch -glob [string tolower [HTTP::host][HTTP::uri]] { "www.abc.com/xyz/*" - "www.abc.com/dhl*" - "www.hll.abc.com/ghi/*" { pool pool_A } default { pool pool_B } } } - MOHIT_125417
Altostratus
Thanks kelvin....
I am having one doubt that HTTP_REQUEST triggers an iRULE whenever the system receives an HTTP request but my request is for HTTPS URLS..
- MOHIT_125417
Altostratus
Does SSL certificate also required on the F5 to be uploaded for this request.....please respond.....
- MOHIT_125417
Altostratus
Does SSL certificate also required on the F5 to be uploaded for this request.....please respond.....
- seilemor_131269
Altostratus
If terminate the SSL traffic at the F5 you only need one certificate in the virtual server (client). If you also encrypt the traffic to the backend (the two pools) you need to add a certificate to the server setting of the virtual server.
Or what do you mean exact???
- MOHIT_125417
Altostratus
Sailemor....requested you to please read my requirement above mentioned...
- seilemor_131269
Altostratus
I´m not sure if there is any different between HTTP and HTTPS requests in the iRule coding. If you search a little bit you find some threads in which some other people ask for this one. The answers are everytime that they should use "HTTP_REQUEST". Have you tried my way?
- nitass_89166
Noctilucent
I am having one doubt that HTTP_REQUEST triggers an iRULE whenever the system receives an HTTP request but my request is for HTTPS URLS..
HTTP_REQUEST will be triggered for both http and https (in case of ssl offloading).
Does SSL certificate also required on the F5 to be uploaded for this request
yes, clientssl profile is needed for ssl offloading (i.e. certificate and key are required).
- MOHIT_125417
Altostratus
thanks nitass for clarifying this...really helpful... - MOHIT_125417
Altostratus
Nitass..servert team is having certificate in .kdb format available.can we convert the same to .key & .cert format..
- nitass
Employee
I am having one doubt that HTTP_REQUEST triggers an iRULE whenever the system receives an HTTP request but my request is for HTTPS URLS..
HTTP_REQUEST will be triggered for both http and https (in case of ssl offloading).
Does SSL certificate also required on the F5 to be uploaded for this request
yes, clientssl profile is needed for ssl offloading (i.e. certificate and key are required).
- MOHIT_125417
Altostratus
thanks nitass for clarifying this...really helpful... - MOHIT_125417
Altostratus
Nitass..servert team is having certificate in .kdb format available.can we convert the same to .key & .cert format..
- nitass
Employee
servert team is having certificate in .kdb format available.can we convert the same to .key & .cert format..
i never used kdb format. is keyman able to convert?
keyman
https://www.ibm.com/developerworks/community/groups/service/html/communityview?communityUuid=6fb00498-f6ea-4f65-bf0c-adc5bd0c5fcc
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com