For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nyif5_225400's avatar
nyif5_225400
Icon for Nimbostratus rankNimbostratus
Mar 21, 2017

web server IIS v10

Hi

I am trying to make one IIS server behind F5 LTM. but it seems like bigIP does not do the redirection correctly and message keep coming on browser... "The page isn’t redirecting properly Firefox has detected that the server is redirecting the request for this address in a way that will never complete."

My setup : template : microsoft_iis IIS web : win2016 v10

Ridirection: http-https redirectionSSL offloadiRULE

Codewhen HTTP_REQUEST {
    if { ( [string tolower [HTTP::host]] eq "ab.test.xyz.com" )  && ( [HTTP::uri] eq "/") } {
    HTTP::redirect "https://ab.test.xyz.com/rdweb/Pages/"
    }
}

I have use this irule many times on other LInux webserver but not sure waht is wrong with IIS server ? is it a problem with IIS template used http template with no happiness ? Do you have any idea ?

/newbie

application delivery
iRules
LTM

21 Replies

  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Mar 21, 2017

    I don't see any problem with the iRule. I just tested in my lab, and works fine.

    when HTTP_REQUEST {
    log local0. "URL = http://[HTTP::host][HTTP::uri]"
    if { ( [string tolower [HTTP::host]] eq "asm.lab.local" )  && ( [HTTP::uri] eq "/") } {
    HTTP::redirect "http://asm.lab.local/admin/"
    }
}
Mar 21 13:42:10 LABBIGIP1 info tmm4[20610]: Rule /Common/test1 : URL = http://asm.lab.local/
Mar 21 13:42:10 LABBIGIP1 info tmm4[20610]: Rule /Common/test1 : URL = http://asm.lab.local/admin/

    If you are redirecting from HTTP to HTTPS, you should have another virtual server to handle the HTTPS traffic. With or without clientssl profile, and serverssl, based in your setup.

    • kunjan's avatar
      kunjan
      Icon for Nimbostratus rankNimbostratus
      Mar 22, 2017

      So it's not the iRule. Is the backend IIS listening on 'https'?

      Can you do a curl from the bigip ?

      curl -k -vv https://ab.test.xyz.com/rdweb/Pages/

    • kunjan_118660's avatar
      kunjan_118660
      Icon for Cumulonimbus rankCumulonimbus
      Mar 22, 2017

      So it's not the iRule. Is the backend IIS listening on 'https'?

      Can you do a curl from the bigip ?

      curl -k -vv https://ab.test.xyz.com/rdweb/Pages/