NimbostratusHi All, We're having an issue with f5 this is the behaviour.
From https: When thr uset login the traffic became http and we are having the error. But when we type manually the https the page is working.
Needed yor expertise, please
CirrocumulusYou need to create a virtual using the same IP, but using port 80 and apply an http profile to it. Then apply the iRule named "_sys_https_redirect" to the virtual.
All http traffic will now we redirected to https.
CirrostratusHi ekal,
Already did that, we have 3 VS VS:80 VS:443 VS:50443
From Client -> VS:80 redirect -> VS:443 -> redirect -> 50443, website login page working. But once the user login the traffic became http.
CirrocumulusThen the server(s) on the backend are doing the redirection.
CirrostratusHi Ekal,
How could we say that backend server is doing the http redirection? Even we have an SSL offloading at f5.
CirrusYou need to create a virtual using the same IP, but using port 80 and apply an http profile to it. Then apply the iRule named "_sys_https_redirect" to the virtual.
All http traffic will now we redirected to https.
CirrostratusHi ekal,
Already did that, we have 3 VS VS:80 VS:443 VS:50443
From Client -> VS:80 redirect -> VS:443 -> redirect -> 50443, website login page working. But once the user login the traffic became http.
CirrusThen the server(s) on the backend are doing the redirection.
CirrostratusHi Ekal,
How could we say that backend server is doing the http redirection? Even we have an SSL offloading at f5.
Cirrus1.HTTP profile with redirect rewrite all parameter might help you keeping the request in https. This setting basically rewrites the URI in all HTTP redirect responses. Create a new HTTP profile from the current profile applied and test with this setting. Make sure you apply same new profile to all 3 vips. 2.You can sniff through response headers using IE Developer tools,Firebug,Fiddler Or HTTP analyzer and you'll know or you can guess which might be causing the redirect. Most of the cases it is app code that is designed to respond HTTP responses without SSL.
CirrostratusHi Hem,
This is a good recommendation no questions with the http will try that one. But on the app code, application keeps on telling me that it is expected since from bigip -> is http traffic or the SSL is being terminated.
Thanks again!
Will keep you posted.
CirrostratusHi Hem,
Just to update this thread. We are still encountering the issue.
-Nat
NimbostratusPlease create a rewrite irule on LB and apply to your 3rd virtual servers. Once your servers will try to send http traffic LB change to http to https while sending the reply to client.