LTM HTTPS and HTTP internal with policy and SSL server profile enabled

Question

Dear All,&nbsp;
I am wondering if it is possible to combine HTTP and HTTPS traffic internally using only one virtual server, for example;&nbsp;
Virtual server App.domain.com:443 with a LTM policy enabled to forward traffic
Internally forward app.domain.com/shop with HTTP to server 1 unencrypted
Internally forward app.domain.com/products with HTTPS to server 2 encrypted&nbsp;
Reading the documentation about the SSL server profile enabled all traffic will be encrypted towards the internal servers. &nbsp;
It would be very convenient to add this feature within a LTM policy to be able to forward traffic using HTTPS and HTTP combined using one virtual server and one LTM policy. Is there a possible way to accomplish this in LTM?&nbsp;

vernonwells · Answer

It can be done with an iRule, as described here:
https://devcentral.f5.com/wiki/iRules.SSL__disable.ashx
The rule would look like this:
when HTTP_REQUEST {
   switch -glob [HTTP::uri] {
      "/shop" -
      "/shop/*" {
         SSL::disable serverside
      }
   }
}

This requires that the attached Virtual Server has a clientssl, a serverssl and an http profile attached.

vernonwells · Answer

Oh, and this could also be done using a Local Traffic Policy:&nbsp;
https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15085.html&nbsp;
if you are using 11.4.0 or higher.&nbsp;

vernon_97235 · Answer

Oh, and this could also be done using a Local Traffic Policy:&nbsp;
https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15085.html&nbsp;
if you are using 11.4.0 or higher.&nbsp;

eastcoast_16835 · Answer

Because of a bug it is not working in 11.4, minimum 11.5 is required.

eastcoast_16835 · Answer

Because of a bug it is not working in 11.4, minimum 11.5 is required.

Forum Discussion

LTM HTTPS and HTTP internal with policy and SSL server profile enabled

5 Replies

Recent Discussions

F5Access | MacOS Sonoma

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

F5 Access Guard Deprecated: ZTA APM

F5 loadbalancer not working

Related Content

Enable telnet on SSH

Enabling ASM profile from iRule fails

2 internal server vlans

SSL Orchestrator Advanced Use Cases: Enabling GCloud Organization Restrictions

Server Profile SNI