How to redirect Https to Https respons ?

Question

Hii Everyone,I have a problem with our client application Web.I have VS port 443 (using SSL) and pool member 80. (IP VS 192.168.x.x:443 --&gt; pool member 10.45.x.x:80 )When client access port 443 at homepage still 443, but when user login to the homepage, its redirected from 443 to http (80). When I dump, the response from server is true (respons 443 TLS) because F5 respons must be 443.&nbsp;The problem is why the user after login to the homepage redirected to HTTP, not HTTPS ?We can't using this step:1. we cannot change the pool member port 80 to member 443 because port 80 still use for internal application, so we cannot create redirected VS http to https.2. Server can be change from 80 to port 443 because&nbsp;have not received permission from the client management.&nbsp;So the question is :Any irules to change the respons server to https when user login to the homepage ???Thankyou.

leslie_hubertus · Answer

Hi&nbsp;Mohamed_Ahmed_Kansoh&nbsp; - I think you meant to past a KB article, but it didn't come through for some reason. Could you please try linking it again?

mohamed_ahmed_kansoh · Answer

Hi&nbsp;Satriaji&nbsp;,&nbsp;Till now I do not see the issue exists on servers , also it is not doable for me to redirect server Responses to https.&nbsp;&gt;If you use client ssl , your traffic should return to clients Encrypted.&nbsp;&gt; Traffic should be returned from server to F5 Decrypted due to non existance of server ssl profile.&gt; if you were redirected after login , maybe you were redirected to another virtual serer using port 80.&nbsp;&gt; Are there any changes in your "hostname" After Loging directly , maybe the homepage redirects you to another domain after loging in.&nbsp;so I susbect that your Requests are un trusted after loging in against this Client ssl not server.&nbsp;I think the issue is still wiith Client ssl&nbsp;you can clarify more if you need , I will follow up

satriaji · Answer

Dear Mohamed,Here the config&nbsp;Server Farm===========IP VS = 192.168.x.x port 443 (without use SSL profile at clientside profile)Pool member = 10.45.x.xx port 443 ( its use to IP VS DMZ )&nbsp;DMZ======IP VS = 10.45.x.x port 443 (its used to IP pool member Serverfarm) using SSL client side profilePool member= 10.43.x.x port 80 (server http)&nbsp;When the user access&nbsp;https://abcd/otcs/login&nbsp;the homepages still https, but after login using user name and password, the homepage :&nbsp;http://abcd/otcs/login . They want to still https when login.&nbsp;thankyou&nbsp;&nbsp;

mohamed_ahmed_kansoh · Answer

Satriaji&nbsp; , Alright then.&nbsp;it’s a strange behavior to me.&nbsp;ِAnyway , I would Recommend to create new http virtual server , and assign a redirection iRule from http to https to force redirection of https always in path.&nbsp;&gt; when login and redirected to non secure http , you should be redirected again by the( new created virtual server + assigned Redirection iRule " http ــــ&gt; https " use the default one )&nbsp;&gt; This below Redirection irule for the " new http virtual server "&nbsp;&nbsp; when HTTP_REQUEST {
       HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]
    }&nbsp;&nbsp;Try it , I hope it works with you.&nbsp;

satriaji · Answer

Dear Mohammed,The VS port 80 have been used for internal application, so we cann't create IP VS port 80. (cannot using step 1 to create VS port 80 then assign the irules_sys_redirect_https) because that IP VS &amp; port 80 have been used.&nbsp;So when the client access https://abc.com&nbsp;--&gt; homepage become http://abc.com&nbsp;, so we must add or manually add "https://" in the browser so the app can be open.&nbsp;Can we use this step on article&nbsp;https://support.f5.com/csp/article/K14775&nbsp;?

Forum Discussion

How to redirect Https to Https respons ?

9 Replies

Recent Discussions

Advise on setting up IRULE

Chrome V 124+ on MacOS - Virtual Server Access Issue

Port Group on F5OS network setting

F5Access | MacOS Sonoma

Rewrite uri translation not working

Related Content

Anchor Link Redirect

Http redirection

HTTP URI Replace/Redirect

HTTP POST redirect preserving POST data

HTTP to HTTPS Redirect Rewrite plus port change