Forum Discussion

refra_151287's avatar
Mar 08, 2015

HTTPS redirect issue after login attempt

Hi all, -->the Issue: I faced an issue when i tried to redirect from HTTP to HTTPS, as follow: 1- I access the VS using HTTP 2- I got redirected to HTTPS. 3- I put my credentials and it succeed. 4- but the issue appears when i tried to requested report, I got 302 warning error,

 

-->troubleshooting: 1- I monitored the statistics of the Virtual Servers, but i found the request went to the HTTP Virtual server (not HTTP VS), Is that Normal?(I saw the same behavior from tcpdump either) 2- I did ssldump at the moment of requesting the report, and found the F5 did redirect but there's no any subsequent traffic from the client, as i got below:

 

[root@company:Active:Standalone] config ssldump -Aed -nni 0.0 host 197.x.x.x New TCP connection 1: 197.x.x.x(4006) <-> 172.x.x.x(80)

 

1425805112.0685 (0.9204) C>S

POST /comanytyy-WSProject-context-root/xyx HTTP/1.1 User-Agent: kSOAP 2.0 + ORACLE Extensions SOAPAction: "" Content-Type: text/xml Pragma: no-cache Accept: text/html, image/gif, image/jpeg, *; q=.2, /; q=.2 Content-Length: 324 Host: 196.Y.Y.Y Cache-Control: no-cache, max-age=43200 Connection: Keep-Alive

 

http://www.w3.org/2001/XMLSchema-instance" xmlns:d="http://www.w3.org/2001/XMLSchema" xmlns:c="http://schemas.xmlsoap.org/soap/encoding/" xmlns:v="http://schemas.xmlsoap.org/soap/envelope/">http://wsproject/" /> 1425805112.0686 (0.0000) S>C

HTTP/1.0 302 Found Location: Server: BigIP Connection: Keep-Alive Content-Length: 0

 

1 1425805112.4446 (0.3759) C>S TCP FIN 1 1425805112.4446 (0.0000) S>C TCP FIN

 

where: 196.Y.Y.Y : the public IP of the domain, 172.x.x.x : the private IP of the VS 197.x.x.x : the client's IP

 

Note: we i use only HTTP everything goes well and nothing weird.

 

so what the issue and how we could be able to mitigate it from F5 or either from the server itself.

 

8 Replies

    • refra_151287's avatar
      refra_151287
      Icon for Cirrus rankCirrus
      thanks nitass, should I apply the stream profile at the HTTP or the HTTPS, and the payload could cause that issue?! and another question the subsequent request after the login attempt succeed is HTTP is that normal?1
  • i understand http post does not work with redirection because post payload will not be preserved.

     

    do you know why client still requests report using http (not https)? is http embedded in html content? if yes, can you try to replace http with https using STREAM::expression or stream profile?

     

    STREAM::expression

     

    https://devcentral.f5.com/wiki/iRules.STREAM__expression.ashx?lc=1

     

    • refra_151287's avatar
      refra_151287
      Icon for Cirrus rankCirrus
      thanks nitass, should I apply the stream profile at the HTTP or the HTTPS, and the payload could cause that issue?! and another question the subsequent request after the login attempt succeed is HTTP is that normal?1
  • should I apply the stream profile at the HTTP or the HTTPS

     

    https virtual server

     

    the payload could cause that issue?

     

    i guess. have you ever used http analzyer tool? it may be helpful.

     

    HttpFox

     

    https://addons.mozilla.org/en-us/firefox/addon/httpfox/

     

    another question the subsequent request after the login attempt succeed is HTTP is that normal?

     

    i think it should be https, shouldn't it?

     

    • refra_151287's avatar
      refra_151287
      Icon for Cirrus rankCirrus
      I tried to use Stream profile before at the HTTPS VS with no luck, I don't know why? I can't use this tool because the client based is mobile application, I always use temper data. I think just first request should be HTTP and the subsequent requests are HTTPS.
  • should I apply the stream profile at the HTTP or the HTTPS

     

    https virtual server

     

    the payload could cause that issue?

     

    i guess. have you ever used http analzyer tool? it may be helpful.

     

    HttpFox

     

    https://addons.mozilla.org/en-us/firefox/addon/httpfox/

     

    another question the subsequent request after the login attempt succeed is HTTP is that normal?

     

    i think it should be https, shouldn't it?

     

    • refra_151287's avatar
      refra_151287
      Icon for Cirrus rankCirrus
      I tried to use Stream profile before at the HTTPS VS with no luck, I don't know why? I can't use this tool because the client based is mobile application, I always use temper data. I think just first request should be HTTP and the subsequent requests are HTTPS.