Forum Discussion
Greg_Donohoe_25
Nimbostratus
NimbostratusURL redirect
Hi, I am trying to configure a URL redirect so that client sessions connectiong to https:abc.home.com are redirected to https://xyz.office.com. The one issue I see is that the xyz.office.com site will have a certificate with that common name included so the client session with the HTTP get of abc.home.com will fail. Is there a way to completely change the destination URL within an irule? Or is there any easier way?
14 Replies
IainThomson85_1Cumulonimbus
A permanent redirect is what you're after...
https://devcentral.f5.com/questions/301-redirection-via-irule
Should solve your issue.
Greg_Donohoe_25Thank you for the reply Iain but I dont understand how that can help me? Will that accept HTTP request for https:abc.home.com and redirect them to https://xyz.office.com? What would the syntax look like?
Yann_Desmarest_Nacreous
Hi,
You can use the following :
when HTTP_REQUEST { if { [HTTP::host] eq "abc.home.com" } { HTTP::respond 301 Location "https://xyz.office.com[HTTP::uri]" } }- Greg_Donohoe_25Hi Yann, thanks for the response. Your irule worked perfectly for what I wanted to do but now the application guys have come back with an additional request :-( There is an authentication server in front of abc.home.com and what they want is any connection coming from that server to be allowed through. BUT if someone tries to go direct to abc.home.com then they need the redirect to xyz.office.com which you have already suggested. Any ideas? What is the best way to define the authentication server source? Any help appreciated.
- Greg_Donohoe_25Just to add to this for better understanding here is the set up: xyz.office.com -> authentication server (virtual server) -> abc.home.com If a connection to abc.home.com comes from authentication server they want the connection to pass throug to pool members. If a connection goes from anywhere else direct to abc.home.com then they are redirected back to xyz.office.com so that they can authenticate correctly. I hope this is a bit clearer.
- Yann_Desmarest_Hi, you should use APM and external logon page.
Yann_DesmarestCirrus
Hi,
You can use the following :
when HTTP_REQUEST { if { [HTTP::host] eq "abc.home.com" } { HTTP::respond 301 Location "https://xyz.office.com[HTTP::uri]" } }- Greg_Donohoe_25Hi Yann, thanks for the response. Your irule worked perfectly for what I wanted to do but now the application guys have come back with an additional request :-( There is an authentication server in front of abc.home.com and what they want is any connection coming from that server to be allowed through. BUT if someone tries to go direct to abc.home.com then they need the redirect to xyz.office.com which you have already suggested. Any ideas? What is the best way to define the authentication server source? Any help appreciated.
- Greg_Donohoe_25Just to add to this for better understanding here is the set up: xyz.office.com -> authentication server (virtual server) -> abc.home.com If a connection to abc.home.com comes from authentication server they want the connection to pass throug to pool members. If a connection goes from anywhere else direct to abc.home.com then they are redirected back to xyz.office.com so that they can authenticate correctly. I hope this is a bit clearer.
- Yann_DesmarestHi, you should use APM and external logon page.
