Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

HTTP and HTTPS from same VS

Micky_Hertford
Altostratus
Altostratus

Hi, is it possible (and if so some advice for a newbie) to have a virtual server listening on port https and depending on the url, forwarding on either http or https to the pool.

 

so https://site.com/url1 is forwarded to the pool on https but requests to https://site.com/url2 would be forwarded to the pool on http.

 

Many thanks for your time..

1 ACCEPTED SOLUTION

SanjayP
MVP
MVP

Yes. there are many ways to do it. serverssl can be selectively enable or disable for the urls.

E.g. one of the option is to apply serverssl on the VIP and disable it for /url2.

iRule option:

when HTTP_REQUEST {
	    switch -glob [string tolower [HTTP::uri]] {
	    	"/url1*" 
			{
		    pool https_pool
	    	}
	    	"/url2*" 
	        {
			SSL::disable serverside
		        pool http_pool
	    	}  default {
          return
	    }
      }
}

ltm policy option:

rule 1-

http uri --> path starts with --> /url1 --> at request

action: forward traffic to https_pool

rule2;

http uri --> path start with --> /url2

action1: disable server ssl --> at request

action2: forward traffic to http_pool

View solution in original post

2 REPLIES 2

SanjayP
MVP
MVP

Yes. there are many ways to do it. serverssl can be selectively enable or disable for the urls.

E.g. one of the option is to apply serverssl on the VIP and disable it for /url2.

iRule option:

when HTTP_REQUEST {
	    switch -glob [string tolower [HTTP::uri]] {
	    	"/url1*" 
			{
		    pool https_pool
	    	}
	    	"/url2*" 
	        {
			SSL::disable serverside
		        pool http_pool
	    	}  default {
          return
	    }
      }
}

ltm policy option:

rule 1-

http uri --> path starts with --> /url1 --> at request

action: forward traffic to https_pool

rule2;

http uri --> path start with --> /url2

action1: disable server ssl --> at request

action2: forward traffic to http_pool

Micky_Hertford
Altostratus
Altostratus

Yes that worked, many thanks for your quick response...