iRule help for

That's fine. So,

when HTTP_REQUEST {
    if { ( [HTTP::url] equals "/a/b/c/d/e/v2" ) and ( [HTTP::method] equals "POST" ) } {
        set logindata [b64encode "username:password"]     
        HTTP::header insert Authorization "Basic $logindata"
        pool vip2_pool
    }
}

Hey Kevin,

Also i changed the [HTTP::url] to [HTTP::uri] -> is that fine?

Thanks, Aditya

Yes, minor type. It should be [HTTP::uri].

But on the other point, there's nothing in the iRule that would be changing the URI, and the VIP wouldn't touch it either.

Not sure if you're re-encrypting between the two BIG-IPs, but you may need to capture traffic between to see what's going on.

You can also set up logging on VIP2 to report the inbound URI.

when HTTP_REQUEST {
    log local0. "Incoming method: [HTTP::method]"
    log local0. "Incoming URI: [HTTP::uri]"
    foreach x [HTTP::header names] {
        log local0. "Incoming header ($x): [HTTP::header $x]"
    }
}

Thanks Kevin,

As of now we are only redirecting traffic from External F5 1 to External F5 2 from https to https, and we have a client ssl and and the default 'serverssl' in place so no encryption is there.

So now flow will be:

Thanks,Aditya

Hi Kevin,

We could not make the changes on the second F5, but we are trying an alternative way.

So I had another query, if we do not offload the SSL on the F5, can we still add the authorization header and forward it to the back end server where the SSL terminates.

Thanks, Aditya

No. You cannot access layer 7 (HTTP) properties unless you decrypt the traffic.

Thanks Kevin.