For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

8 Replies

  • Hi,

    You can use the following irule :

    when HTTP_REQUEST {
        if { [HTTP::host] eq "xxx.abc.com" and [HTTP::path] eq "/xyz" } {
            HTTP::respond 302 Location "https://yyy.xyz.com/nnn/ppp"
        }
    }
    
    • Chirag_Mehta_15's avatar
      Chirag_Mehta_15
      Icon for Nimbostratus rankNimbostratus
      Many thanks for a super fast response. I'll try this out and let you know how this goes. Really appreciate
    • tlsarles_253441's avatar
      tlsarles_253441
      Icon for Nimbostratus rankNimbostratus
      Does the HTTP_REQUEST get triggered for HTTPS as well? Also, for this to work, do we need to be doing SSL offload? Isn't the hostname in the HTTP headers, which would be encrypted?
    • Yann_Desmarest_'s avatar
      Yann_Desmarest_
      Icon for Nacreous rankNacreous
      Hi, Yes this event is triggered also by https but only if you do ssl offloading or bridging (attach clientssl/serverssl profiles). When using SSL, all the flow is encrypted, but with ssl offloading, headers are in plain text
  • Hi,

    You can use the following irule :

    when HTTP_REQUEST {
        if { [HTTP::host] eq "xxx.abc.com" and [HTTP::path] eq "/xyz" } {
            HTTP::respond 302 Location "https://yyy.xyz.com/nnn/ppp"
        }
    }
    
    • Chirag_Mehta_15's avatar
      Chirag_Mehta_15
      Icon for Nimbostratus rankNimbostratus
      Many thanks for a super fast response. I'll try this out and let you know how this goes. Really appreciate
    • tlsarles_253441's avatar
      tlsarles_253441
      Icon for Nimbostratus rankNimbostratus
      Does the HTTP_REQUEST get triggered for HTTPS as well? Also, for this to work, do we need to be doing SSL offload? Isn't the hostname in the HTTP headers, which would be encrypted?
    • Yann_Desmarest's avatar
      Yann_Desmarest
      Icon for Cirrus rankCirrus
      Hi, Yes this event is triggered also by https but only if you do ssl offloading or bridging (attach clientssl/serverssl profiles). When using SSL, all the flow is encrypted, but with ssl offloading, headers are in plain text