Forum Discussion

johnpgonz_14595's avatar
johnpgonz_14595
Icon for Nimbostratus rankNimbostratus
Mar 09, 2014

Will I really have to terminate SSL just to redirect 80 to 443

Is there a way to redirect http to https on the LTM without using a redirect iRule which relies on http profile to applied to the VS? The scenario is I'm not terminating SSL (so no SSL profile), yet I want to redirect port 80 requests to 443. I was going to use an iRule, but that needs a http profile to be applied to the VS. From what I gathered in a similar question/answer the http profile will cause the LTM to try to parse the http request, but will drop it since it's encrypted. Will I really have to terminate SSL just to redirect 80 to 443. I'm looking for the simplest way to implement http to https redirection when Virtual Server service port is 443?

 

1 Reply

  • Hi!

     

    To do a redirect via the load balancer you must have an HTTP profile. But if all you want is to redirect 80 to 443 then there should be no harm, right?

     

    From your description is looks like you're attempting to use a wildcard virtual server and then it's not possible.

     

    You need two virtual servers, something like this: Virtual server 1 listening to ie 1.1.1.1:80, has an HTTP profile + iRule with redirect to 443. Virtual server 2 listening to ie 1.1.1.1:443, does not have an HTTP profile, nor SSL client profile.

     

    That should work like you described.

     

    Please correct me if I misunderstood your question.

     

    /Patrik