Forum Discussion

Wolf46_144992's avatar
Wolf46_144992
Icon for Nimbostratus rankNimbostratus
Nov 03, 2014

HTTP profile to rewrite URL

Hi,

 

I have followed the following article - https://support.f5.com/kb/en-us/solutions/public/14000/700/sol14775.html to configured an HTTP profile to rewrite redirect requests sent from our internal server.

 

We currently have a Virtual Server configured to offload SSL connections from the backend. The internal server is currently sending an HTTP 302 redirect to an HTTP website. The HTTP profile should be capable of rewriting that responce to HTTPS prior to forwarding it to the Client.

 

However this seems to be failing since we the client is being returned the URL as HTTP.

 

Our system is running version 11.5.1

 

8 Replies

    • Wolf46_144992's avatar
      Wolf46_144992
      Icon for Nimbostratus rankNimbostratus
      Hi Nitass, As a matter of fact I have used both HTTP Fox and also Fiddler to try to get an idea on what might be happening. It seems that we are getting redirected with a 302 message within the HTTP header itself. I have also tried using the Stream Profile using the Target and the following syntax: @http://myold.url.com@https://mynew.url.com@
    • Wolf46_144992's avatar
      Wolf46_144992
      Icon for Nimbostratus rankNimbostratus
      Hi Nitass, As a matter of fact I have used both HTTP Fox and also Fiddler to try to get an idea on what might be happening. It seems that we are getting redirected with a 302 message within the HTTP header itself. I have also tried using the Stream Profile using the Target and the following syntax: @http://myold.url.com@https://mynew.url.com@
  • have you tried tcpdump/ssldump? just wondering if the problem is in header or message body.

     tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x or host y.y.y.y -v
    x.x.x.x is virtual server ip
    y.y.y.y is pool member ip
    
    • Wolf46_144992's avatar
      Wolf46_144992
      Icon for Nimbostratus rankNimbostratus
      Hi Nitass, Ok so found out that the actual 302 was not originating from the internal server but from the LTM itself as we have an irule listening on the same IP address on port 80 redirecting requests to 443. I have done a TCP dump on both client and internal server and noticed that we are getting an HTTP 200. However this web service used to work fine when published over our ISA server. I believe that the F5 handles the traffic in a different manner.
  • have you tried tcpdump/ssldump? just wondering if the problem is in header or message body.

     tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x or host y.y.y.y -v
    x.x.x.x is virtual server ip
    y.y.y.y is pool member ip
    
    • Wolf46_144992's avatar
      Wolf46_144992
      Icon for Nimbostratus rankNimbostratus
      Hi Nitass, Ok so found out that the actual 302 was not originating from the internal server but from the LTM itself as we have an irule listening on the same IP address on port 80 redirecting requests to 443. I have done a TCP dump on both client and internal server and noticed that we are getting an HTTP 200. However this web service used to work fine when published over our ISA server. I believe that the F5 handles the traffic in a different manner.