Forum Discussion

chethan_181144's avatar
chethan_181144
Icon for Nimbostratus rankNimbostratus
Jul 03, 2017
Solved

Why do we use HTTP to HTTPS redirect ?

Hi F5 Team ,

 

When do we use "redirect HTTP requests to HTTPS for a virtual server on the BIG-IP system" ? What are the benefits of doing this ? In which scenario we use this ?

 

Regards , Chethan

 

application delivery
iRules
LTM
  • eben_259100's avatar
    eben_259100
    Jul 03, 2017

    1.End-User ease. Not all users know to use https://abc.com. its much easier to do abc.com in their browsers and get redirected to https. 2. You redirect from Non-secure to Secure when http->https redirect is used.

     

    HTH Regards.

     

4 Replies

Sort By
  • eben's avatar
    eben
    Icon for Nimbostratus rankNimbostratus
    Jul 03, 2017

    1.End-User ease. Not all users know to use https://abc.com. its much easier to do abc.com in their browsers and get redirected to https. 2. You redirect from Non-secure to Secure when http->https redirect is used.

     

    HTH Regards.

     

    • Chris_Grant's avatar
      Chris_Grant
      Icon for Employee rankEmployee
      Jul 07, 2017

      Also, keep in mind that without this, and with nothing listening on port 80, what the user will get is a simple timeout "Server not found" when trying to go to http://www.yoursite.com/ rather than seeing your website after a simple redirection. If you're trying to sell the user a good or service you want to make sure they are seeing your website, not an error message.

       

  • eben_259100's avatar
    eben_259100
    Icon for Cirrostratus rankCirrostratus
    Jul 03, 2017

    1.End-User ease. Not all users know to use https://abc.com. its much easier to do abc.com in their browsers and get redirected to https. 2. You redirect from Non-secure to Secure when http->https redirect is used.

     

    HTH Regards.

     

    • Chris_Grant's avatar
      Chris_Grant
      Icon for Employee rankEmployee
      Jul 07, 2017

      Also, keep in mind that without this, and with nothing listening on port 80, what the user will get is a simple timeout "Server not found" when trying to go to http://www.yoursite.com/ rather than seeing your website after a simple redirection. If you're trying to sell the user a good or service you want to make sure they are seeing your website, not an error message.