we have 3 external web urls which will come on our frontend f5 and redirect to internal web urls and use as a revers proxy https://site3Ex.com should redirect to http://site3In.com how we can make iRule so it should work

It's interesting how often this comes up, and the most important thing to understand here is the (potentially incorrect) use of the term "redirect". In HTTP-speak, and equally in BIG-IP iRules, a redirect is a flow control command. Given a typical reverse proxy configuration, where a client request flows through the proxy to the server, a redirect inserted at the proxy causes a preempt response back to client without passing traffic to the server. I'm assuming that's not what you want. So based on your description, there are at least three requirements: Terminate the client side SSL and pass server side HTTP unencryptedParse HTTP requestsModify the HTTP Host request header The first is accomplished by incorporating a client SSL profile. The second is accomplished via attached HTTP profile. And the third can be a fairly straight forward iRule. I'm assuming here that all three external URLs are coming to the same virtual server and iRule. when HTTP_REQUEST { switch [string to lower [HTTP::host]] { "site1ex.com" { HTTP::host "site1in.com" } "site2ex.com" { HTTP::host "site2in.com" } "site3ex.com" { HTTP::host "site3in.com" } default { HTT::host "site1in.com" } } }

Thanks Kevin for your responses. indeed, its looks same requirements. I will be incorporating a client SSL profile suppose if i will use port 443 on VIP still HTTP profile required? i am using only single public IP to VIP for all three web urls. Kevin could you please explain why you used default {HTT::host "site1in.com" } at the end. i hope it should be work my requirement is looks same, i will apply and update you. appreciating your effort.

I will be incorporating a client SSL profile suppose if i will use port 443 on VIP still HTTP profile required? Yes, you'll still need and HTTP profile on the VIP to be able to use the above iRule. could you please explain why you used default {HTT::host "site1in.com" } at the end. It was a guess. It's always good to include a "default" condition in a switch, so I guessed at what you'd want if the host name didn't match any of the previous tests.

Kevin meant HTTP::host "site1in.com" not HTT::host "site1in.com"

Hello, Kevin good afternoon. I have prepared iRule below, could you please verify will work or not? when HTTP_REQUEST { if {[string tolower [HTTP::host]] equals "site1ex.com"} { HTTP::redirect "http://site1in.com" } elseif {[string tolower [HTTP::host]] equals "site2ex.com"} { HTTP::redirect "http://site2in.com" } elseif { [string tolower [HTTP::host]] equals "site3ex.com"} { HTTP::redirect "http://site3in.com" } } i am not sure but i hope it should also work as its if condition only.

we have 3 external web urls which will come on our frontend f5 and redirect to internal web urls and use as a revers proxy

14 Replies

raj_Kumar_19166
Nimbostratus
Feb 10, 2016
indeed, kevin.

its correct as you mention . i am just adding some more light on points. 1.The external client would request https://site1ex.com 2.The external client would hit your F5 on public IP 67.23.x.x 3.The F5 has to rewrite the HTTP host name from site1ex.com to site1in.com 4.The F5 has to forward the request to 10.10.10.1:8083 using site1in.com as host name which is coming from host https://site1ex.com 5.The F5 has to forward the responses back to your client while replacing any hints of site1in.com to site1ex.com
raj_Kumar_19166
Nimbostratus
Feb 10, 2016
indeed, kevin.

its correct as you mention . i am just adding some more light on points. 1.The external client would request https://site1ex.com 2.The external client would hit your F5 on public IP 67.23.x.x 3.The F5 has to rewrite the HTTP host name from site1ex.com to site1in.com 4.The F5 has to forward the request to 10.10.10.1:8083 using site1in.com as host name which is coming from host https://site1ex.com 5.The F5 has to forward the responses back to your client while replacing any hints of site1in.com to site1ex.com
raj_Kumar_19166
Nimbostratus
Feb 10, 2016
1.The external client would request https://site1ex.com

2.The external client would hit your F5 on public IP 67.23.x.x

3.The F5 has to rewrite the HTTP host name from site1ex.com to site1in.com

4.The F5 has to forward the request to 10.10.10.1:8083 using site1in.com as host name which is coming from host https://site1ex.com

5.The F5 has to forward the responses back to your client while replacing any hints of site1in.com to site1ex.com
raj_Kumar_19166
Nimbostratus
Feb 10, 2016
1.The external client would request https://site1ex.com

2.The external client would hit your F5 on public IP 67.23.x.x

3.The F5 has to rewrite the HTTP host name from site1ex.com to site1in.com

4.The F5 has to forward the request to 10.10.10.1:8083 using site1in.com as host name which is coming from host https://site1ex.com

5.The F5 has to forward the responses back to your client while replacing any hints of site1in.com to site1ex.com

Forum Discussion

we have 3 external web urls which will come on our frontend f5 and redirect to internal web urls and use as a revers proxy

14 Replies

Win Big in Vegas: The iRules Contest is back with $5k on the line at AppWorld 2026

Jürgen - February 2026 Featured Member

F5 Architecture Track Sessions - AppWorld 2026

Recent Discussions

HTTP2 iRule manipulation

Apmd memory and swap grows over time

ASM bd daemon crash while processing request body (SIGSEGV) – anyone seen similar behavior?

F5 APM irule to log the VPN session parameters

DNS topology not distributing as expected

Related Content

F5 HTTPS Redirect 2025

External Monitor Information and Templates

Redirecting to an external site when the internal site is down

TACACS+ External Monitor (Python)

CSV to Address External Datagroup File

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS