Forum Discussion

NiteshBV_289330's avatar
NiteshBV_289330
Icon for Nimbostratus rankNimbostratus
Sep 07, 2016

Http to https without redirecting to client.

I need to change from http to https but it should not redirect to client browser, connection should start from virtual server.

 

I have already setup but it is redirecting to client browser.

 

GET / HTTP/1.1 User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4 libidn/1.23 librtmp/2.3 Accept: / Host: www.salesforce.com

 

  • HTTP 1.0, assume close after body < HTTP/1.0 302 Found < Location: https://www.salesforce.com/ < Server: BigIP
  • HTTP/1.0 connection set to keep alive! < Connection: Keep-Alive < Content-Length: 0 <

Can someone help me on this?

 

5 Replies

  • Not sure how this works, as I haven't used the "virtual" command in an iRule and really have no idea how it is handled internally, but give the following iRule a try. Apply this iRule to a non-http virtual server and create a second virtual server named VS_WITH_HTTPS (or anything you want to name it, really) and test it out.

    when CLIENT_ACCEPTED {
      virtual VS_WITH_HTTPS
    }
    
  • I'm trying to understand the use case for this.

     

    You want the F5 to handle the Encryption of the service to a back end server. But want the connection incoming on open HTTP?

     

    Can you share your current VIP configuration ?

     

    Technically you'd need a server SSL profile, with a key/cert combo to the back end server. Unsure on how that would behave as I've never actually had to do it....

     

  • Use case:

     

    client----------->f5------------->server https ^ https | http | | Proxy

     

    1) Client contact server which is https. 2) It goes through my proxy. 3) client to f5 will be https, f5 <----> proxy is http. 4) Later i need to rewrite http to https to send traffic to server but redirecting will not help here because again client browser starts from step 1, there will be loop.

     

    I you need any more information please let me know.