Forum Discussion

AlexCosby_29092's avatar
AlexCosby_29092
Icon for Nimbostratus rankNimbostratus
Nov 21, 2018

Serving Port 80 and 443 for a web application

We have a web server which has historically only run on port 443. In order to use ACME for automated cert issuance, I have to allow port 80 through to the web server. I've configured the web server to listen on 80, allowed the port in local firewall and perimeter firewall, and created a virtual server at the F5 pointing to the same internal IP as the functional 443 application.

 

When I attempt to access it over the internet, I get a generic timeout error.

 

I suspect the issue has to do with our APM and the establishment of SSL, but I don't know how to get around that. What is the correct way to set up a virtual server and APM policy to handle both 80 and 443 to the same machine?

 

APM
devops

1 Reply

Sort By
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Nov 29, 2018

    There's a Secure setting in the Cookie Options of the APM profile - SSO/Auth Domains tab. This option, when enabled (by default) instructs the browser to only use the APM session cookie over HTTPS connections.

     

    I might caution that if a single access session is to be used across 80 and 443 connections, there's a risk of compromising the HTTPS session if the cookie is stolen. It may be better to isolate the 80 and 443 traffic into separate policies.