Forum Discussion

NK's avatar
NK
Icon for Nimbostratus rankNimbostratus
Jul 07, 2020

one VIP can have two domain, one is acutal and one is dummy, only forwarding

I have requirement.

two doman Aalpha & Beta , both are internal,

Alpha is working and Beta is dummy (future Launh)

where domain Alpha example https://alpha.local.ae is working fine on VIP - 192.168.5.20

now another domain Beta is example https://Beta.ae is only configured in DNS record as A recored to resolve to 192.168.5.20 (same VIP)

 

now Can I have iRule in Alpha VIP, that whenver it https://Beta.ae hits to Alpha.local.ae,then it should redirect to domain Alpha but diffenrt URL like https://Alpha.local.ae/dep/Beta/

 

when HTTP_REQUEST { if { [HTTP::header host] eq "Beta.ae" } { HTTP::redirect "https://Alpha.local.ae/dep/Beta/" }}

 

 

when we open direct link https://Alpha.local.ae/dep/Beta/ it is working .

however redirect does not work.

 

 

Not Found

HTTP Error 404. The requested resource is not found.

5 Replies

  • Could you try this:

    when HTTP_REQUEST { 
         if { [string tolower [HTTP::host]] equals "beta.ae" } { 
              HTTP::redirect "https://alpha.local.ae/dep/Beta/" 
              }
    }

    Cheers,

    Kees

    • NK's avatar
      NK
      Icon for Nimbostratus rankNimbostratus

      Thanks for reply Kee.

      both iRule working, however issue is with noticed only on internet explorer, where it gives certificate error ., which Chrome not giving any such error.

       

      Error Code: DLG_FLAGS_SEC_CERT_CN_INVALID

  • Ok, but are you using a certificate on the virtual server (in your client ssl profile) with both DNS names in it? Or are you using two client ssl profiles with SNI (Server name indication)??

     

    And what version of IE are you using?

     

    Cheers,

     

    Kees

  • NK's avatar
    NK
    Icon for Nimbostratus rankNimbostratus

    ie 11 (11.1550)

    client certificate only have SNI (SAN included for alpha domain not for beta.

     

    but working from chrome and not ie, surprize ?

  • That is a big surprise..... But IE is correct, you are not presenting the correct certificate.