For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bdo_isd_28658's avatar
bdo_isd_28658
Icon for Nimbostratus rankNimbostratus
Feb 14, 2007

working http redirect rule, needed to be modifiled for https use

Hello DevGurus,     i am far from an iRule expert, but have a rather urgent need (by 11am GMT 15/2 - tomorrow!) to get one of our existing HTTP redirect iRules, modified and working for the HTT...
application delivery
dev
devops
iRules
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Feb 14, 2007
He may not be able to set an http profile if the https vip is not doing SSL offload. Are you passing thru the SSL all the way to the servers (ie, is the pool on 443 as well)? If so, you're going to have to use a clientside ssl profile to decrypt, so you can apply the http profile and do the redirect, and then use a serverssl profile to re-encrypt the traffic to the servers. If you are passing thru SSL all the way to the servers without having BIG-IP do the decryption, the http profile will break the vip (and you can't do anything with HTTP events in iRules).

 

 

Denny