Forum Discussion

sysadmin_2015_2's avatar
sysadmin_2015_2
Icon for Nimbostratus rankNimbostratus
Oct 16, 2018

iRule - Switch host header in browser

Hello,

 

We have a special case were we have a customer sending traffic by IP instead of host name, VPN tunnel. Instead of https://test.f5.com/api/example there hitting us as https://37.123.55.109/api/example. This was causing an issue for us in regards to the IIS/Bindings expecting but was getting an IP. I have attached the below iRule to the bip-ip 443 virtual server and traffic seems to be flowing, I'm getting a response back from server but now I'm still getting an SSL error because the browser still shows the IP. Is my iRule missing anything?

 

when HTTP_REQUEST { if {[HTTP::uri] contains "api/example" } { HTTP::host pool Pool_Prod_API_Example } }

 

Thank you for the help!

 

BIG-IP
cloud
devops
iRules

1 Reply

Sort By
  • Philip_Jonsson's avatar
    Philip_Jonsson
    Icon for MVP rankMVP
    Oct 16, 2018

    Hey sysadmin_2015

     

    The reason why the browser does not change the URL is because you are simply rewriting the HTTP::header on the server-side connection. The IIS will accept the traffic because IIS Binding is receiving the correct HTTP header.

     

    In order to have the web browser change the URL, you will need to redirect the user to the correct URL. However, based on the question, I'm guessing the FQDN is not resolvable by the client. Is it a Client VPN or a Site-to-Site VPN? If it's a Client VPN you could change the DNS servers of the client to one that can resolve the FQDN.