Forum Discussion

Al_3585's avatar
Al_3585
Icon for Nimbostratus rankNimbostratus
Aug 29, 2012

HTTPS / HTTP Issues

I think I have found my problem but now I need help to correct the problem with iRules, I hope.

 

 

Scenerio: Client HTTPS (443) --> F5 (VS --> SSL Off-load --> HTTP (8080) --> Server

 

 

A request is made to the server as https but when selecting a page link, the response back to the client is shown as http and the connection fails. The problem can be resovled by adding the "s" back in the URL and now the link functions. What can be done to prevent this?
application delivery
dev
devops
iRules

6 Replies

Sort By
  • Brian_69413's avatar
    Brian_69413
    Icon for Nimbostratus rankNimbostratus
    Aug 29, 2012
    Do you mean to say that the server sends back a 301 or 302 response with http://... specified? You can either get the server to correct its responses, create a second vip for port 80 that uses the https_redirect irule, or rewrite the responses with an iRule(not recommended)
  • Al_3585's avatar
    Al_3585
    Icon for Nimbostratus rankNimbostratus
    Aug 29, 2012
    I think we are close but just to make sure, you are correct the client does see an http:// link but why is it not https if the F5 is doing SSL off-loading? If I understand correctly the response going back to the client should be SSL.
  • Brian_69413's avatar
    Brian_69413
    Icon for Nimbostratus rankNimbostratus
    Aug 29, 2012
    I believe the response is SSL, but if the SSL response contains an HTTP redirect to a non-SSL site, your browser is going to honor it.
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Aug 29, 2012
    Try setting the redirect rewrite option in the HTTP profile. All or Matching should suffice.

     

     

    This option catches redirects and automatically corrects for the "reverse proxy" mismatch.
  • Al_3585's avatar
    Al_3585
    Icon for Nimbostratus rankNimbostratus
    Aug 29, 2012
    Got it working but had to rewrite web server xml code. Thanks to all!