Forum Discussion

Paul_Zajicek_73's avatar
Paul_Zajicek_73
Icon for Nimbostratus rankNimbostratus
May 30, 2007

selectively remove https

Hi,

 

I have an app that uses both client and server side ssl,

 

but I have to stop the server side ssl for a certain uri (a webservice) but still keep the client side ssl,

 

I've searched the forums but I cannot see how to do it as a redirect will not do. Any help is much appreciated, Thanks.

 

application delivery
dev
devops
iRules

1 Reply

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    May 30, 2007
    In the HTTP_REQUEST event on the clientside (client to BIG-IP), you can determine if the request is one you want to disable SSL for on the serverside (BIG-IP to node).

    Here's an example:

    
when HTTP_REQUEST {
   set usessl 1
   if { [HTTP::path] starts_with "/clear" } {
      set usessl 0
   }
}
when SERVER_CONNECTED {
   if { $usessl == 0 } {
      SSL::disable
   }
}

    Else, I think you could use 'clientside' to force the evaluation of HTTP::path to the clientside context and do this in one event:

    
when SERVER_CONNECTED {
   log local0. "Requested path: [clientside {HTTP::path}]"
   if { [clientside {HTTP::path}] starts_with "/clear" } {
      SSL::disable
   }
}

    If you have multiple URI's to disable encryption for, you might want to define them in a datagroup and then check the requested URI against the datagroup list.

    Aaron