Forum Discussion

ChuckR_16063's avatar
ChuckR_16063
Icon for Nimbostratus rankNimbostratus
Sep 15, 2017

connection rests on wildcard VIP

Hi, I've got a wild virtual wit the below irule restricting access, redirecting based on the incoming port and so on... when CLIENT_ACCEPTED { if { ([TCP::local_port] == 80) || ([TCP::local_port] == 9082) } { SSL::disable } elseif { [TCP::local_port] != 443 }{ reject } } when HTTP_REQUEST { if { ([TCP::local_port] == 80) } { HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri] } if { ( [TCP::local_port] == 9082 && [HTTP::host] contains ":") } { HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri] } }

 

This works great for the first three links below, always end up at . The 4th link though the F5 is resetting the client connection though - always. 3-way handshake completes, then a PSH,ACK from the client, the f5 ACKS that then immediately resets the connection. I'm perplexed particularly as all three of the first ones work. Any ideas. Thanks folks,

 

 

 

 

 

application delivery
iRules
LTM

1 Reply

Sort By
  • Faruk_AYDIN's avatar
    Faruk_AYDIN
    Icon for Nimbostratus rankNimbostratus
    Sep 16, 2017

    Hi Guy,

     

    This is a normal situation. Because the 4th link starts https and every browser uses TLS/SSL while accessing this type of link., but in your irule SSL is disabled after TCP handshake completes(when CLIENT_ACCEPTED).