Forum Discussion

Gary_Walderich_'s avatar
Gary_Walderich_
Icon for Nimbostratus rankNimbostratus
Apr 25, 2007

Masking/Hiding original URL?

I am currently working on configuring a BigIP within an SAP environment, and need to know if I can mask/hide the original URL with a standard URL. Reason, I do not want users to know the entire URL address along with the SAP port and directories that is being used to access the SAP servers.

 

 

I currently have a Virtual server located on SAP port 50100 over https using a client ssl profile. The virtual server then connects to a pool with a single SAP server over port 50100 over http.

 

 

Right now, to get to the virtual server you have to go to the following: https://users.test.com:50100/irj/portal. What I would like to see is https://users.test.com within the URL. Can this be done with an iRule, and if so, how? Again, what my goal is, is to keep the original URL hidden /Masked from users, to make it look like a normal address.

 

 

Current BigIP code I am utilizing on the LTM is 9.4.

 

 

Many Thanks!

 

-GW

13 Replies

  • A thought...

     

     

    The GET request for ":50100/irj/portal/" could have followed a redirect from the server being rewritten from "/" to ":50100/irj/portal/". The Location header per RFC2616 must contain an absolute URI, but maybe this app uses a relative URI of "/"? If it did, the string map command would rewrite the redirect to the URI you're seeing the client request.

     

     

     

    ftp://ftp.rfc-editor.org/in-notes/rfc2616.txt

     

     

    14.30 Location

     

     

    The Location response-header field is used to redirect the recipient

     

    to a location other than the Request-URI for completion of the

     

    request or identification of a new resource. For 201 (Created)

     

    responses, the Location is that of the new resource which was created

     

    by the request. For 3xx responses, the location SHOULD indicate the

     

    server's preferred URI for automatic redirection to the resource.

     

    The field value consists of a single absolute URI.

     

     

     

     

    Aaron
  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    I know it was baffling me last night, and I was pretty tired... but doesn't the string map I used remove all instances of ":50100/irj/portal" from an outbound redirect? I just don't see what logic in the iRule could have created such a URI.

     

     

    I would love to see concurrent traces, logs, and HTTPwatch/LiveHeaders output from the client, because I'm obviously missing somehting.

     

     

    /deb
  • Well, implemented everything again tonight, and still the same issue.

     

     

    I also turned on HTTP Watch, and nothing was logged. I was getting a server rejected error. This is really weird.....