For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

HTTPS offload rewriting

Problem this snippet solves: This iRule shows how to rewrite an HTTP web application's self references from http:// to https:// to avoid insecure content warnings. Note if the response content siz...
Published Mar 18, 2015
Version 1.0
application delivery
content manipulation
devops
iRules
Tewfik_Megherbi's avatar
Tewfik_Megherbi
Ret. Employee
May 30, 2017

If you get errors from browser about XMLHttpRequest response server being send over http.

 

Error message might be : Mixed Content: The page at 'https:/xxxx.com/zzz.html' was loaded over HTTPS, but requested an insecure resource 'http://xxxx.com/b/ttt.css'. This request has been blocked; the content must be served over HTTPS."

 

Make sure you assign a compression profile to the VS that runs this irule.

 

This is because STREAM function requires that server response to be decompressed before hand.