Forum Discussion
Use VS Port difference Member port for https traffic
ngockq Based on the response that the client is receiving most likely the server is issuing the redirect with the port defined as 9445 for the HTTPS connection. If this is the case then you will need to create an iRule to replace the 9445 with 9080 in the HTTP Response so that the client maintains the connection on port 9080 or just disable the redirect from the server if it's not required.
- ngockqMay 28, 2023
Altostratus
Should I need to use irule or policy for this VS ? Which one is better for performane?
In other wise, I think Server backend (pool member server- application layer) should respone with correct port 9080 to F5 --> client. So F5 don't need rewrite.
- PauliusMay 28, 2023
MVP
ngockq I don't use ltm policies often so I'm not sure how to configure them for this particular situation but I would imagine it can be done and it is probably the better performing between iRules and ltm policies because it's built in rather than an iRule which you can come up with almost whatever TCL code you would like with a few limitations.
If it were me I would opt to go to the web admins and have them correct the issue on the server side rather than doing this on the F5 because the less you have the F5 do the better in most situations. I'm almost certain that the server is performing a redirect with an explicit path rather than using relative path so that the user can decide where they connect to on the host port side of the connection. If the web admins cannot fix this issue then try and resolve it using the F5. My guess here is that even if you perform the rewrite on the F5 using LTM policy or iRule it will still cause an issue because the server is issuing a redirect with the port but only one way to find out.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com