https, http redirect tips & tricks

Question

Hi,&nbsp;
&nbsp;i worked with irule and i have a small problem:&nbsp;&nbsp;
&nbsp;i have an internet website in https and http
&nbsp;my browser go to http://www.mywebip.com/&nbsp;
&nbsp;i want to follow this way:
&nbsp;if i connect to http://www.mywebip.com/ i redirect to https://www.webip.com/login&nbsp;
&nbsp;If i am on https://www.webip.com
&nbsp;i don't want to leave websecure server for all uri /login and /secure
&nbsp;but i ask another uri , i want to return in http mode.&nbsp;
&nbsp;My problem is the following:
&nbsp;when i connect http, i go to https, all is ok, but when https redirect to http,  my website send me http://www.webip.com and i have a loop.&nbsp;
&nbsp;What can i do to avoid that?&nbsp;
&nbsp;I have a irule for http and a irule for https
&nbsp;my http irule is :
&nbsp;when HTTP_REQUEST {
&nbsp;if { [HTTP::uri] equals "/" }{
&nbsp;HTTP::redirect "https://www.webip.com"}&nbsp;
&nbsp;my https irules is:
&nbsp;when HTTP_REQUEST {
&nbsp;if { [HTTP::uri] starts_with "/login" } {
&nbsp;log "blahblah"
&nbsp;} elseif { [HTTP::uri] starts_with "/secure" } {
&nbsp;log "blahblah2"
&nbsp;} else {
&nbsp;HTTP::redirect "http://www.webip.com[HTTP::uri]" }
&nbsp;}&nbsp;
&nbsp;i am sure it's very easy, but i am starting with irule...&nbsp;&nbsp;
&nbsp;Thanks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

colin_walker_12 · Answer

Well, it sounds like all you'd need to do to stop the redirect loop is add the proper check to your HTTP rule.
Assuming you only want the HTTP rule to redirect to HTTPS if they are trying to view a page inside of /secure or /login, then you'd do something like this:
when HTTP_REQUEST {
  if { [HTTP::uri] equals "/" } { 
    HTTP::redirect "https://www.webip.com/login"
  } elseif { ( [HTTP::uri] starts_with "/login") or ( [HTTP::uri] starts_with "/secure") } {
    HTTP::redirect "https://www.webip.com[HTTP::uri]"
  }
}
You'd then want to change your HTTPS rule to look something like:
when HTTP_REQUEST {
  if { [HTTP::uri] starts_with "/login" } {
    log "blahblah"
  } elseif { [HTTP::uri] starts_with "/secure" } {
    log "blahblah2"
  } elseif { ( [HTTP::uri] equals "" ) or ( [HTTP::uri] equals "/") } {
    log "blahblah3"
  } else {
    HTTP::redirect "http://www.webip.com[HTTP::uri]" 
  }
}
I think that should get you where you need to go.  The biggest change is making sure that your HTTPS rule is checking for an empty URI, and not redirecting if the URI is empty.
HTH,
-Colin

laurent_marion_ · Answer

thanks colin, i find the solution.&nbsp;

colin_walker_12 · Answer

Sure thing, I'm glad to hear we could help.&nbsp;
&nbsp;-Colin

zafer · Answer

Hello 
&nbsp;  
&nbsp; i used these irule, redirect works for http to https and https to http but i have problem with warnings 
&nbsp;  
&nbsp; when client request redirect http to https or https to http we receive alot of security warning messages, we wait only 1 warning message. What can i do for solving this problem 
&nbsp;  
&nbsp; regards 
&nbsp;  
&nbsp; zafer &nbsp;

iku_72301 · Answer

hi, berberz  
&nbsp; I had the same problem before. in my case, I checked source file onf the contents. then, I tound URL were still "http://..". when I fixed these URLs, problems get solved. if you still had this problem, try it.  
&nbsp; thnx  
&nbsp; pineda

Forum Discussion

https, http redirect tips & tricks

7 Replies

Recent Discussions

Pricing when used with aws waf

F5 Rseries R2600 Tenant sizing

iRule help masking IBM host URL/URI

Need advise to setup a policy on F5

Advise on setting up IRULE

Related Content

https to https redirection

iRule HTTPS to HTTPS redirection

Simple HTTP::redirect iRule results in a reset

Redirect from Http to Https Not working

http to https redirection