LineRate HTTP to HTTPS redirect
Here's a quick LineRate proxy code snippet to convert an HTTP request to a HTTPS request using the embedded Node.js engine. The relevant parts of the LineRate proxy config are below, as well. By modifying the redirect_domain variable, you can redirect HTTP to HTTPS as well as doing a non-www to a www redirect. For example, you can redirect a request for http://example.com to https://www.example.com . The original URI is simply appended to the redirected request, so a request for http://example.com/page1.html will be redirected to https://www.example.com/page1.html . This example uses the self-signed SSL certificate that is included in the LineRate distribution. This is fine for testing, but make sure to create a new SSL profile with your site certificate and key when going to production. As always, the scripting docs can be found here. redirect.js: Put this script in the default scripts directory - /home/linerate/data/scripting/proxy/ and update the redirect_domain and redirect_type variables for your environment. "use strict"; var vsm = require('lrs/virtualServerModule'); // domain name to which to redirect var redirect_domain = 'www.example.com'; // type of redirect. 301 = temporary, 302 = permanent var redirect_type = 302; vsm.on('exist', 'vs_example.com', function(vs) { console.log('Redirect script installed on Virtual Server: ' + vs.id); vs.on('request', function(servReq, servResp, cliReq) { servResp.writeHead(redirect_type, { 'Location': 'https://' + redirect_domain + servReq.url }); servResp.end(); }); }); LineRate config: real-server rs1 ip address 10.1.2.100 80 admin-status online ! virtual-ip vip_example.com ip address 192.0.2.1 80 admin-status online ! virtual-ip vip_example.com_https ip address 192.0.2.1 443 attach ssl profile self-signed admin-status online ! virtual-server vs_example.com attach virtual-ip vip_example.com default attach real-server rs1 ! virtual-server vs_example.com_https attach virtual-ip vip_example.com_https default attach real-server rs1 ! script redirect source file "proxy/redirect.js" admin-status online Example: user@m1:~/ > curl -L -k -D - http://example.com/test HTTP/1.1 302 Found Location: https://www.example.com/test Date: Wed, 03-Sep-2014 16:39:53 GMT Transfer-Encoding: chunked HTTP/1.1 200 OK Content-Type: text/plain Date: Wed, 03-Sep-2014 16:39:53 GMT Transfer-Encoding: chunked hello world
HTTPS redirect to different pools
Hi Guys, I'm trying to use an iRule to redirect traffic based on the URL. Let me give you the example: The Virtual server is on port 443, but the pools are on 8443 and 9443. https://10.10.10.10/blue goto pool_b goto pool_r The default pool in the virtual server is pool_b_8443. Traffic gets to there no problem. However, I can not seem to get this iRule to work. I'm not an expert with BIG IP LTM so please go easy on me :-) Thank you Euan
SOAP HTTPS redirects not working (Postman / SoapUI)
Hello, I am using the Postman application, as well as SoapUI, to test some SOAP requests to an application that is behind our F5 WAF. When I send SOAP HTTPS POST requests, the WAF handles the request perfectly and all tests pass. However, when I send these requests over HTTP, tests do not succeed and I get an HTTP 500 error. To be clear, I have the default F5 iRule attached to the virtual server to redirect HTTP requests to HTTPS, and it does work. If I make a request to the site through the browser over HTTP, it gets sent to HTTPS. As another side note of troubleshooting, I have seen old threads that mention the Postman Interceptor Chrome extension being necessary for some API testing. I have installed it, turned it on, and I still get the same issues. My next step was turning on HTTP Analytics logging and looking at some of these requests to see if I could spot a difference between where we force HTTPS and where we leave it as HTTP. From what I can tell, it looks like every HTTP 500 response shows that it was a GET request... which is wrong, because the tests are configured as an HTTP POST. So to me it seems like the WAF is redirecting the HTTP POST to an HTTPS GET, which is why we get the 500 response code. Does this sound like anything someone has seen before? Any insight as to why this is occurring is appreciated.
HTTP to HTTPS
Hi, I was wondering if someone could help me with an irule that will redirect a site http://test.site.com:8050 to https:test.site.com:8050. The problem is it keeps getting stuck in a loop. I need it to know if its http to redirect but if the site comes in https then to not redirect the request again. Thanks!!!irule to redirect url
at the moment we have this irule elseif { ([string tolower [HTTP::uri]] starts_with "/test") } { HTTP::redirect "http://m.domain.com[HTTP::uri]" So what it does is this: if a user goes here www.domain.com/test/sport/competitions/champions-league/Madrid-2403444.html?utm_source=exacttarget&utm_medium=email&utm_campaign=pc01tmn2&utm_content=g01&sb_cid=3516 user will be redirected to https://m.domain.com/test/sport/uefa-competitions/uefa-champions-league/Roma-v-Real-Madrid-2403444.html but we want to redirect to https://m.domain.com/test/sport/competitions/champions-league/Madrid-2403444.html?utm_source=exacttarget&utm_medium=email&utm_campaign=pc01tmn2&utm_content=g01&sb_cid=3516 instead , how do we achieve this using irule?Append FQDN to all request
I am trying to write an iRule to append the FQDN to https request. My concern isn't a user receiving cert warning etc. I can get it to work the following way: http://server1 gets redirected to https://server1.mydomain.com https://server1 does not get redirected to https://server1.mydomain.com it stays as https://server1 current iRule: when HTTP_REQUEST { HTTP::redirect https://mydomain.com[HTTP::uri] } iRule is applied to the virtual server running on port 80 I use to forward requests to virtual server setup to run on port 443. How can I get it to append fqdn to both http and https requests?
HTTPS Redirect with no SSL termination on F5
Hi, I am trying to setup HTTPS redirect so all the traffic to https://www.example.com/ go to https://www.example.com/guest, but this HTTPS virtual server is not using F5 to do SSL offload, so F5 to backend server is HTTPS not HTTP. I tried using F5 to decrypt the HTTPS traffic by loading an SSL client cert to this virtual server, so it can use iRule, and then encrypt it before it sends back to server, but couldn't get that to work. I wonder if F5 can do this kind of redirect, with iRule or something else. Thanks in advance!
