NimbostratusIs it possible using iRules to redirect a https to a different https in which the LTM VIP is in L4 forwarding mode? Or does SSL have to be terminated at the LTM VIP to do any modifications?
For example https://myapp.abc.com (GTM Wide IP) is redirected (or header replace?) to https://myapp.boston-dc.abc.com
Thank you
EmployeeYou would not be able to do this with an encrypted data stream or with a fastl4 virtual. In neither case is the BigIP aware of the URL, so decisions cannot be made based on the URL.
With an encrypted data stream, we would not be able to see inside the payload without decrypting. And with a FastL4 profile, we would not have logic applied to analyze the layer 7 data.
To make this work you would need to have SSL terminated on a regular virtual server with an HTTP profile applied. Applying an HTTP profile to an unterminated virtual server would result in no traffic passing (as we would never see the HTTP traffic we needed to make a load balancing decision).