Forum Discussion

Joern_Oltmann's avatar
Joern_Oltmann
Icon for Nimbostratus rankNimbostratus
Mar 02, 2016

iRule Maintanance Page doesn't work with https

Hi all,

I have the following iRule running and it works good for an http virtual server. But on an https virtual server I get an error. Anyone an idea?

    when HTTP_REQUEST {

     if { [active_members [LB::server pool] ] == 0 } {
         if { [HTTP::uri] ends_with "/wlw_logo.png" } {
             HTTP::respond 503 content [ifile get "wlw_logo.png"]
         } else {
             HTTP::respond 503 content [ifile get wartungsseite.html]
         }       
    }
}

9 Replies

    • Joern_Oltmann's avatar
      Joern_Oltmann
      Icon for Nimbostratus rankNimbostratus
      I get an error from firefox Error: Secure Connection Failed The connection to xxx.xxx.de was interrupted while the page was loading. The site can not be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem.
  • I think your problem is that you do not decrypt clientside SSL on your https VIP. By minimum, you will need to specify two things. A clientssl profile as one, and a HTTP profile as number two for this iRule to work on a https VIP.

     

    • Joern_Oltmann's avatar
      Joern_Oltmann
      Icon for Nimbostratus rankNimbostratus
      Hm a clientside SSL and a modified HTTP Profile (Insert X-Forwarded-For enabled) I have, because the https VIP works fine when all member are available.
    • Joern_Oltmann's avatar
      Joern_Oltmann
      Icon for Nimbostratus rankNimbostratus
      OK I found the Problem, because the HTTPS Header was not set before the iRule. But now I don't see the logo :-(
  • I think your problem is that you do not decrypt clientside SSL on your https VIP. By minimum, you will need to specify two things. A clientssl profile as one, and a HTTP profile as number two for this iRule to work on a https VIP.

     

    • Joern_Oltmann's avatar
      Joern_Oltmann
      Icon for Nimbostratus rankNimbostratus
      Hm a clientside SSL and a modified HTTP Profile (Insert X-Forwarded-For enabled) I have, because the https VIP works fine when all member are available.
    • Joern_Oltmann's avatar
      Joern_Oltmann
      Icon for Nimbostratus rankNimbostratus
      OK I found the Problem, because the HTTPS Header was not set before the iRule. But now I don't see the logo :-(