Forum Discussion

Joseph_Johnson_'s avatar
Joseph_Johnson_
Icon for Nimbostratus rankNimbostratus
Apr 25, 2016

HTTP to HTTPS

Hi,

 

I was wondering if someone could help me with an irule that will redirect a site http://test.site.com:8050 to https:test.site.com:8050. The problem is it keeps getting stuck in a loop. I need it to know if its http to redirect but if the site comes in https then to not redirect the request again.

 

Thanks!!!

 

application delivery
BIG-IP
difference between http and https default health monitor
http to https
https redirect
redirect
redirect port

6 Replies

Sort By
  • shopkeeper56_23's avatar
    shopkeeper56_23
    Icon for Cirrostratus rankCirrostratus
    Apr 25, 2016

    Generally with http-to-https redirection you would have two VS's with the same destination IP on different ports (eg. 80 & 443). There is a default iRule which will work for this (_sys_https_redirect). You will not be able to create one VS on 8050 without SSL profiles and another on the same port without SSL profiles to redirect to.

     

    Why does your front end VS need to be listening on 8050 specifically? Could you not just do the generic 80/443 scenario I mentioned and if you backend pool members are listening on 8050 (ssl or otherwise), configure them as such.

     

    • Theo_12742's avatar
      Theo_12742
      Icon for Cirrus rankCirrus
      Apr 26, 2016
      Furthermore, I would make the comment to the Oracle developers that they had to change the SSL settings for their port, and it's unrealistic to presume you wouldn't have to as well. The problem lies with order of operations: SSL is negotiated before HTTP comes into play (where you would redirect). I don't know of a way you could, though it may be possible if you could (using an iRule) detect whether SSL is used at an earlier event (like CLIENT_CONNECTED, where you can disable SSL).
    • shopkeeper56_23's avatar
      shopkeeper56_23
      Icon for Cirrostratus rankCirrostratus
      Apr 26, 2016
      I dont see why you couldn't make the virtual server with no client SSL profile (aka HTTP between client and Big IP), then use a server SSL profile (SSL between Big IP and Server). This can all be done on the same VIP. This I think does what your describing does it not?
    • Joseph_Johnson_'s avatar
      Joseph_Johnson_
      Icon for Nimbostratus rankNimbostratus
      Apr 25, 2016
      Where would the redirect come into play. Remember, all of this is happening on the same VIP, I don't see how HTTP and HTTPS would use SSL on the same VIP simultaneously.