Forum Discussion

Jomar_46001's avatar
Jomar_46001
Icon for Nimbostratus rankNimbostratus
Oct 20, 2010

Redirection and DNS Masking

Hi,

 

 

I am having problems implementing an iRule to solve the following situation:

 

 

 

Customer has 2 sites; a.b.com and y.z.com. Both sites are hosted on the F5 and have functioning VIPs. We are trying to redirect a URI string of http://a.b.com/apply to https://y.z.com, while maintaining the a.b.com/apply host name.

 

 

 

So far this is what I have done.

 

 

On a.b.com I have applied an irule(Rule 1) that redirects traffic to https://a.b.com/abc/common/Pages/welcome.aspx. if the URI matches "/apply"

 

On the https://a.b.com VIP i have applied a rule(Rule 2) that says if the URI matches "/abc/common" use pool y.z.com. Rule 1 is working fine, the redirection happens no problem. Rule 2 is throwing a connection was reset in the browser. I am at a loss here any help would be appreciated.

 

 

 

Thanks,

 

Jason

 

 

 

Rule 1:

 

when HTTP_REQUEST {

 

if {

 

[string tolower [HTTP::uri]] starts_with "/apply"} {

 

HTTP::redirect "https://a.b.com/abc/Pages/welcome.aspx" }

 

}

 

 

 

 

Rule 2:

 

 

 

when HTTP_REQUEST {

 

if {

 

[string tolower [HTTP::uri]] starts_with "/abc/common/" } {

 

pool y.z.com

 

}

 

}

 

 

12 Replies

  • Chris, thanks again for the help. It looks like the problem was that site a.b.com had a SSL server side profile(which is unusual for our environment). We quickly set up a node that listens on 443 with a self-signed cert, put it into a pool and were able to make a connection.

     

     

    If you hadn't told me to take a look at the differences in the VIPs I wouldn't have caught the profile.

     

     

  • Posted By Jomar on 10/20/2010 11:30 AM

     

    Chris, thanks again for the help. It looks like the problem was that site a.b.com had a SSL server side profile(which is unusual for our environment). We quickly set up a node that listens on 443 with a self-signed cert, put it into a pool and were able to make a connection.

     

     

    If you hadn't told me to take a look at the differences in the VIPs I wouldn't have caught the profile.

     

     

     

    Glad you found the issue! I figured it was a port/server issue based on the connection reset.