Forum Discussion

Corey_Webb_9791's avatar
Corey_Webb_9791
Icon for Nimbostratus rankNimbostratus
Dec 18, 2007

Redirect HTTP to HTTPS without using HTTP_REQUEST trigger

I need to redirect traffic that comes to my VIP as http:\\x.y.z to https:\\x.y.z however since there is no actual HTTP_REQUEST triggered when the request comes in as http I need to trigger this redirect with some other trigger that happens before the request like port or client address but none of these seem to allow for the HTTP::redirect command to be issued. Any Ideas???

 

 

Thank you,

 

Corey
application delivery
dev
devops
iRules

26 Replies

Sort By
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Dec 18, 2007
    I'm not sure I follow. Why is there no HTTP_REQUEST even triggered?

     

     

    This is where you'd want to put the redirect...

     

     

    Colin
  • Corey_Webb_9791's avatar
    Corey_Webb_9791
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2007
    There is no HTTP_REQUEST triggered because HTTP(port 80) is not running on the physical server it only is running 443. This is simply a redirect to allow users to be lazy and not type https.
  • Corey_Webb_9791's avatar
    Corey_Webb_9791
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2007
    Here is how is looked in Version 4

     

     

    if (server_port == 80) {

     

    if (http_uri contains "IDHAN" or http_uri contains "idhan") {

     

    redirect to "https://%h/%u"

     

    }

     

    else {

     

    if (http_uri contains "HanHelp" or http_uri contains "hanhelp") {

     

    use pool Health-DVLP

     

    }

     

    else {

     

    discard

     

    }

     

    }

     

    }
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Dec 18, 2007
    The HTTP_REQUEST event fires when the LTM sees an HTTP_REQUEST come in from the client. It has nothing to do with what is, or isn't running on the server.

     

     

    Colin
  • Corey_Webb_9791's avatar
    Corey_Webb_9791
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2007
    well according the packet captures that I am doing I am getting a HTTP Get packet to the VIP and not processing the I rule so what else should I look at to see why the HTTP_REQUEST is not getting triggered. When I send the same host and uri only using https it triggers the HTTP_REQUEST. Not sure why it is not triggering the HTTP_REQUEST then do you know why?
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Dec 18, 2007
    When you say "the VIP", are you saying that there is only one Virtual for both port 80 and port 443 traffic? Meaning it's listening on all ports?

     

     

    With the iRule shown above, any HTTP requests coming into the VIP that the rule is applied to would trigger an HTTP_REQUEST event, and the code contained therein.

     

     

    Colin
  • Corey_Webb_9791's avatar
    Corey_Webb_9791
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2007
    Looks like when I take my client ssl profile out which has the certificate assigned to it then I can get to the site using the HTTP address but now I can not get to it using the HTTPS site any ideas on how I can make this work.
  • Corey_Webb_9791's avatar
    Corey_Webb_9791
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2007
    Rule looks like this now.

     

    when HTTP_REQUEST {

     

    if {[TCP::server_port] == 80 } {

     

    if {[string tolower [HTTP::uri]] equals "idhan/" } {

     

    HTTP::redirect "https://[HTTP::host][HTTP::uri]"

     

    pool NETDEV

     

    }

     

    elseif {

     

    [string tolower [HTTP::uri]] equals "hanhelp/"} {

     

    pool NETDEV

     

    }

     

    else {

     

    discard}
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Dec 18, 2007
    Slight rule mod, too:

    
when HTTP_REQUEST {
  if {[string tolower [HTTP::uri]] starts_with "/idhan" } {
    HTTP::redirect "https://[HTTP::host][HTTP::uri]"
  } elseif { [string tolower [HTTP::uri]] starts_with "/hanhelp"} {
    pool NETDEV
  } else {
    discard
  }
}

    No need to redirect AND try to send to a pool in the same if case.

    Colin