Capture client IP and redirect to virtual website - no SSL profile

Without a HTTP profile you simply can't meet your requirements I'm afraid. Is there a particular reason you don't want any?

It is my understanding that HTTP profiles require SSL profiles wich require SSL certificates. The main objective in the project I am managing is to remove the SSL certificates from the LTM 3900. I did have a case open with support and received an email here is a part of what was stated "set the http profile. To do that you need SSL Profiles" With that info I moved on to research this without http profiles.

 

 

 

Here's a TCP-only iRule to do redirection:

when RULE_INIT {
set static::REDIRSITE "http://www.f5.com"
set static::LOCALPOOL "local-pool"
}
when CLIENT_ACCEPTED { 
if { [class match [IP::client_addr] equals my_ip_group] } {
log local0. "IP match: redirect"
TCP::respond "HTTP/1.0 302 Found\r\nServer: BIG-IP\r\nConnection: Close\r\nContent-Length: 0\r\nLocation: $static::REDIRSITE\r\n\r\n"
} else {
log local0. "No IP match: local pool"
pool $static::LOCALPOOL
}
}

That said, as Steve relays, if you're not terminating the SSL on the BIG-IP then you're not going to see any of the clear text traffic anyway. If your HTTP traffic is encrypted, then to use an HTTP profile (and HTTP iRule) you would indeed need an SSL profile applied to the virtual server. And if you wanted to see the clear text traffic for the above TCP iRule, you would still need an SSL profile. In fact if you want to do anything at all with iRules, you need to be able to see the requests and responses, which would require an SSL profile if the traffic is encrypted.

-Hadn't seen Kevins post when I wrote this;

 

 

Fair point. They don't unless SSL/TLS is involved which it is here so sorry for missing that. Unless you terminate the SSL on the BIG-IP, it can't deal with the HTTP within.

 

 

So, your situation is even worse. You can't do the HTTP::redirect in the iRule unless you have both HTTP and SSL profiles assigned to the VS. Is the site you wish to redirect to under your control?

 

 

BTW, the other part looks fine.