Forum Discussion

GLF_77239's avatar
GLF_77239
Icon for Nimbostratus rankNimbostratus
Sep 18, 2016

Redirect iRule from one HTTPS to another HTTPS

I am new with iRules and I need help to setup an iRule for a website. We have an APP that is setup to use https and working externally fine(It's configured using a vs on 443 pool on 3003 and a ssl client and ssl server profile) and get externally HTTPS://xxxxxx:3003/aaa, HTTPS://yyyyyy:3003/aaa and HTTPS://yyyyyy.com/aaa what I am trying to do is

 

1) Drop or reject externally everything but HTTPS://yyyyyy.com/aaa

 

2) Redirect HTTPS://yyyyyy.com/aaa and HTTP://yyyyyy.com/aaa to HTTPS://yyyyyy.com

 

If someone can help me I'll really appreciate it

 

Thank you in advance

 

Richard

 

iRules
LTM
security

4 Replies

Sort By
  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Sep 18, 2016

    Unless I am missing something, your requirement will cause a reject action for any traffic flow:

     

    For HTTPS traffic, based on rule-2, HTTPS://yyyyyy.com/aaa will be redirected to HTTPS://yyyyyy.com/ and this will be rejected based on rule-1.

     

  • GLF_77239's avatar
    GLF_77239
    Icon for Nimbostratus rankNimbostratus
    Sep 18, 2016

    Thank you for your quick quick answer.

     

    on point 1 what I am trying to do is mask the server name and port

     

    on point 2 I would like to get a redirect irule from whatever the client is typing

     

    HTTPS://yyyyyy.com/aaa or HTTP://yyyyyy.com/aaa to HTTPS://yyyyyy.com.

     

    Do not worry about point 1 but at least get the irule for point 2

     

    Thank you in advance

     

    Richard

     

    • Vijay_E's avatar
      Vijay_E
      Icon for Cirrus rankCirrus
      Sep 18, 2016

      For better flow of answer, if you are posting something as a follow-up to an answer, add a "comment" instead of adding an "answer". It helps others to better understand the current status.

      The server information won't be visible to the client. So, you don't really have to worry about it.

      You would have to attach this iRule to the VS:443 & VS:80

      when HTTP_REQUEST {
if { ([HTTP::host] eq "domain.com") and ([HTTP::uri] eq "/aaa") } {
HTTP::respond 301 Location "https://domain.com/"
}
}
    • GLF_77239's avatar
      GLF_77239
      Icon for Nimbostratus rankNimbostratus
      Sep 18, 2016

      I will test the irule that you sent me to my VS on 443 and let you know if it works. The port 80 is being used for another APP and I can't touch it. They configured the APP to work only on 443. I am sorry to send my comments as an answer.(my first time using devCentral)

       

      Thank you again!

       

      Richard