Forum Discussion

Mark_Vogel's avatar
Mark_Vogel
Icon for Altostratus rankAltostratus
Jul 09, 2015

Immediately redirect HTTPS sessions without a valid cert

I'm on LTM 10.2.4.

 

What I'm trying to do is have a VS that has no valid certificate (https client profile) on it, and no pool behind it, and just have it IMMEDIATELY redirect the connecting https clients to a URL (which is actually a completely different VS). Note that the clients already have a favorite in their browser that is for which currently points directly to a web server. I don't have the cert for click.this.com is my problem. We're going to kill that server off and then create a CName for click.this.com to resolve to new.that.com, which will resolve to a VS's IP on the F5. I just need that VS to immediately redirect the user's browser to a totally different URL.

 

So far it appears the HTTPS session needs to complete before any iRules kick in to redirect the session. So naturally without having the cert loaded for click.this.com the users will get a cert warning, which they have to accept first, then the iRule kicks in to redirect. Can't have users getting a warning.

 

I know the easy thing here would be to have the server guys put a redirect right on the current click.this.com web server to get them to the new URL but (1) I don't know how they feel about that and (2) I really want know if this can be done on the F5 or not!

 

Thanks in advance.