Forum Discussion

JN's avatar
JN
Icon for Nimbostratus rankNimbostratus
Jul 20, 2015

HTTPS to HTTP irule - yes it's backwards

Trying to create a HTTPS to HTTP redirect irule to force incoming S connections to use the http vip. I just tried to copy the built-in HTTPS>HTTP irule, but it did not like that. Any suggestions? ...
application delivery
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 21, 2015

agree on the HTTP profile, not on the SSL profile since it's coming in unencrypted. Probably should have mentioned that also.

 

If a user types into the browser URL, the browser is going to attempt to do SSL. There's really no way around this. So in order to catch layer 7 HTTP requests on a VIP listening on port 443 for HTTPS requests, you need to be able to terminate the incoming SSL with a client SSL profile.