Forum Discussion

SL's avatar
SL
Icon for Cirrus rankCirrus
Nov 20, 2014

Enabling WL-Proxy-SSL and IS_SSL=ssl

Hi

 

Can someone advise how do I enable WL-Proxy-SSL and IS_SSL=ssl.

 

I am currently using v11.5.1 HF5. Do I need to use an iRule to accomplish this? Can I add both settings in the "Request Header Insert" in the http profile settings?

 

Any suggestions would be appreciated so that i can add these to the settings

 

application delivery
deployment
devops
iRules
LTM
TMSH

1 Reply

Sort By
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Nov 22, 2014
    you can use HTTP::header insert. HTTP::header https://devcentral.f5.com/wiki/iRules.HTTP__header.ashx e.g. config [root@ve11a:Active:In Sync] config tmsh list ltm rule qux ltm rule qux { when HTTP_REQUEST { HTTP::header insert "WL-Proxy-SSL" "true" "IS_SSL" "ssl" } } trace [root@ve11a:Active:In Sync] config ssldump -Aed -nni 0.0 port 80 New TCP connection 1: 192.168.207.56(61516) <-> 172.28.24.10(80) 1416661232.4021 (0.0036) C>S --------------------------------------------------------------- GET / HTTP/1.1 Accept: */* Accept-Language: en-US User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; InfoPath.3; MS-RTC LM 8; .NET4.0E) Accept-Encoding: gzip, deflate Host: 172.28.24.10 Connection: Keep-Alive Cache-Control: no-cache --------------------------------------------------------------- New TCP connection 2: 200.200.200.14(61516) <-> 200.200.200.101(80) 1416661232.4038 (0.0016) C>S --------------------------------------------------------------- GET / HTTP/1.1 Accept: */* Accept-Language: en-US User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; InfoPath.3; MS-RTC LM 8; .NET4.0E) Accept-Encoding: gzip, deflate Host: 172.28.24.10 Connection: Keep-Alive Cache-Control: no-cache WL-Proxy-SSL: true IS_SSL: ssl ---------------------------------------------------------------