Greetings, I was able to configure linerate as reverse proxy and replicate HTTP traffice and it works greart but now i need to replicate HTTPS traffice but HTTPS traffice didnt pass from line rate to the real server .. could you please help me with that its really critical? Thanks..

It looks like there are two things you need to modify here in your config: setting the service types to HTTP from TCP on all VIPs/VSs/RSsconfigure the virtual server VIPs to be defaults Here is a summary of what you will need to update in the configuration. Keep in mind, you will need to admin-offline these items before being able to change service type. virtual-server vsSecondary attach virtual-ip vipSecondary default virtual-server vsSecondary1 service http attach virtual-ip vipsecondary1 default real-server rss-rep1 service http virtual-ip vipsecondary1 service http virtual-server Webssilo1 attach virtual-ip vipsweb1 default Doing this, I was able to replicate your configuration and successfully pass traffic to the original servers and replication servers for both HTTP and HTTPS. This should get you up and running, too.

Hello mnabih80, are you having issues sending traffic to both the "Original Real Servers" and the "Replication Real Servers" or just one of them? One thing you can check would be to ensure SSL Profiles are attached to: the incoming Virtual IPthe original Real Serversthe replication Real Servers These links may be helpful for checking the ssl profile configuration: Real Server: attach ssl profile Virtual IP: attach ssl profile

Hello Andrew , Thanks for your support. I'm having an issue to the orginal real server i'm receivng the warrnning for the certificate that mean it's attacheded well but once i conifmr to access the site it give me 404 not found. i've attached the ssl profile to the VIP and real server i still didn't check the replicaiton yet , i don't know if the orignal node.js will work also with https traffic or i need to attach it to the vip for ssl traffic. Thanks

Take a look at your Virtual Server config and make sure the vip you have attached is "default." This is a common issue that will cause 404s if everything else is otherwise configured properly. Basically "default" says "any request that comes in and does not hit a virtual server with a particular hostname, go here." This is especially important for requests going to a raw IP address without a hostname. Here's an example config: ! virtual-server vs1 service http attach virtual-ip vip1 default attach real-server group reals ! More information on this can be found here in the docs. If this doesn't work for you, can you reply with your VIP/VS/RS config so we can try and understand your environment's configuration?

Thanks Andrew for you wonderfull support , i solved this issue by change the service type of VS and VIP and RS from http to TCP . the last annoying sept os to replicate the HTTPS traffic , i was able to replicate http traffic by using the customized Node.js and it works great , but with HTTPs i don't know to do it . i tried to change each http word wit hhttps and create vsecondy1 and loop back ip on a diffrent port and RS that i need to replicate traffic but nothing works . can you help me with that ?

You may want to see if you can get the HTTP service type working for your setup. TCP will work for system-based load balancing, but right now only HTTP traffic can be modified with nodeJS scripts. Once you get a HTTP-based setup working, as it looks like you noticed, the HTTPS module in node would need to be used instead of HTTP to replicate requests. More info can be found here including an example of how to do https.request(). Let me know if this works for you.

HTTPS | DevCentral

27 Replies

Andrew_Ragone_2
Historic F5 Account
Sep 14, 2015
This reply should get you up and running.
mnabih80_221446
Nimbostratus
Sep 14, 2015
Could u let.me know how to backup then reset the conf then restore again
- Andrew_Ragone_2
  Historic F5 Account
  Sep 14, 2015
  Information on how to backup configuration can be found here: http://docs.lineratesystems.com/087Release_2.6.1/200CLI_Reference_Guide/Exec_Commands/Backup_Mode_Commands Information on how to restore configuration can be found here: http://docs.lineratesystems.com/087Release_2.6.1/200CLI_Reference_Guide/Exec_Commands/Restore_Mode_Commands
mnabih80_221446
Nimbostratus
Sep 15, 2015
Thanks Andrew for your patience i'm really appreciatr your amazing help..i will try and confirm you.

Thanks again
mnabih80_221446
Nimbostratus
Sep 20, 2015
it works , thanks Andrew for this help .
- Andrew_Ragone_2
  Historic F5 Account
  Sep 21, 2015
  Great, glad to hear!
mnabih80_221446
Nimbostratus
Sep 28, 2015
Hello Andrew ,

sorry i came again with two requests .

I noticed that at the replicated server , 1 request appear as two requests however it was appear as 1 request before. as below example 192.168.10.25 - - [28/Sep/2015:05:43:58 -0700] "GET / HTTP/1.1" 301 234 192.168.10.25 - - [28/Sep/2015:05:43:58 -0700] "GET /favicon.ico HTTP/1.1" 301 245

also if i need to get the traffic with users IP not linerate IP what should i do please .
- Andrew_Ragone_2
  Historic F5 Account
  Sep 29, 2015
  I'm not exactly sure what your first question might be. Can you explain more detail about 1) what your expectations are and 2) what differs from this? There should be two requests that originate out of the LineRate instance with the AB replication script installed. Second, the best way to pass through the client's original IP address is to use the X-Forwarded-For header. Here's a great article from my colleague Satoshi that details how to use this: https://devcentral.f5.com/s/articles/inserting-x-forwarded-for-header-with-linerate
mnabih80_221446
Nimbostratus
Sep 29, 2015
Thanks Andrew for your fast responce , we can neglect the first issue but the second one could you please let me know what should i do to allow client IP . i checked the article but actually i'm not professional in linerate and don't know what should i do exactly . i'm sorry if i'm annoying you with my requests .

Thanks
- Andrew_Ragone_2
  Historic F5 Account
  Sep 29, 2015
  Basically, you need to add the following line to your "virtual server object".on('request') callback function, ideally at the beginning: servReq.addHeader('X-Forwarded-For', servReq.connection.remoteAddress);
- mnabih80_221446
  Nimbostratus
  Sep 29, 2015
  i think the simple way is to add client ip header at the linerate manager but i tried 'X-Forwarded-For' or x-client-ip or clientip but it didn't work
mnabih80_221446
Nimbostratus
Sep 29, 2015
i think the simple way is to add client ip header at the linerate manager but i tried 'X-Forwarded-For' or x-client-ip or clientip but it didn't work

also when i start to add my production server [Apache server] as real server https requests gives me "Status 502 Bad Gateway" however i added another IIS server and it works great. is there any additional configuration ?

Forum Discussion

HTTPS

27 Replies

Recent Discussions

Rundeck ansible F5 errors

What is the meaning is 52% block in WAF

rewrite Azure AD response for portal access via web portal

AS3 Monitoring multiple ports selectively

Open Redirection Mitigation

Related Content

HTTPS to HTTP

iRule to take cookie from HTTP Response into HTTP Request via table

Re: F5 XC Distributed Cloud HTTP Header manipulations and matching of the client ip/user HTTP header

Handling HTTP Requests on an HTTPS Virtual Server

HTTP To HTTPS Redirect 301