Forum Discussion

mulhollandm_648's avatar
mulhollandm_648
Icon for Nimbostratus rankNimbostratus
Dec 10, 2013

big ip ltm http profile dropping https

folks

 

i'm trying to add an irule on a big ip ltm 1600 (11.4)

 

it requires a http profile to be associated with the vserver but when i do this https traffic stops working

 

anyone any idea why this is happing and how i can resolve it

 

thanks to anyone taking the time to reply

 

4 Replies

  • Richard__Harlan's avatar
    Richard__Harlan
    Historic F5 Account

    From the sound of it you do not have a clientSSL profile. with out one the HTTP profile will drop the traffic as it is not HTTP traffic but SSL traffic. Once you add a SSL profile it should work. Would also have to either change the back end server for plain text or re-encrypt the traffic back to them. Thanks

     

  • richard,

     

    many thanks for your answer

     

    the sites i'm losing are google etc and wheni enable the client ssl i lose both http and https

     

    the big ip sits infront of a couple of proxy server

     

    ps the irule is only to identify traffic that is go bypass the proxy and go direct to the end server

     

    thanks again

     

  • Richard__Harlan's avatar
    Richard__Harlan
    Historic F5 Account

    You will then need to create a new VIP for 443 and push the traffic to the servers, while the port 80 vip will then have the iRule

     

    • mulhollandm_648's avatar
      mulhollandm_648
      Icon for Nimbostratus rankNimbostratus
      richard thanks again for your post i'm a bit lost here because i have another big-ip-ltm 1600, running the same code, that works without the extra vip i am using x-forwarding in a custom profile - should this make a difference thanks again