Forum Discussion
8 Replies
Haven't built this out in the lab but the procedure should work:
- Create a virtual server that listens on all ports (e.g. 10.1.0.1:0)
- Assign an http profile to the virtual server
- Configure SSL termination on the virtual server (clientside is mandatory. serverside is optional depending on the backend pool members)
- Create an http-to-https profile or iRule that redirects http traffic to https
Let me know if you need additional detail on any of these steps.
- babaransari_361Nimbostratus
i tried the above but they did not work
Need a little more information to be able to assist.
Please post the configuration that you tried to implement:
- SSH to the F5
- tmsh list ltm virtual VirtualServerName
- tmsh list ltm irule iRuleName
- AceDawg1Nimbostratus
Haven't built this out in the lab but the procedure should work:
- Create a virtual server that listens on all ports (e.g. 10.1.0.1:0)
- Assign an http profile to the virtual server
- Configure SSL termination on the virtual server (clientside is mandatory. serverside is optional depending on the backend pool members)
- Create an http-to-https profile or iRule that redirects http traffic to https
Let me know if you need additional detail on any of these steps.
- babaransari_361Nimbostratus
i tried the above but they did not work
- AceDawg1Nimbostratus
Need a little more information to be able to assist.
Please post the configuration that you tried to implement:
- SSH to the F5
- tmsh list ltm virtual VirtualServerName
- tmsh list ltm irule iRuleName
- Stanislas_Piro2Cumulonimbus
There are multiple example about this question on devcentral!
But the big question is : WHY?
It is so simple to create 1 http virtual server which is configured with _sys_https_redirect, and another https virtual server configure to manage legitimate traffic!
- Edward_Gastón_SNimbostratus
can you use the irule that F5 have for default, this irule have the nombre redirection.