Forum Discussion

ukstin's avatar
ukstin
Icon for Nimbostratus rankNimbostratus
Jun 26, 2008

Redirect pool to HTTPS

Hi,

I´ve made the following i-rule: 

when HTTP_REQUEST { 
 set parametro [HTTP::uri] 
 if { ([string tolower $parametro] contains "abcd/") } { 
 pool pool_abcd 
 } elseif { ([string tolower $parametro] contains "efgh/") } { 
 pool pool_efgh 
 } elseif { ([string tolower $parametro] contains "ijkl/") } { 
 pool pool_ijkl 
 } else { 
 pool pool_default 
 } 
 }

It works but I need to apply it to a SSL Virtual Server, but there is no http profile apllied and bigip doesn´t let me apply this i-rule on this VS.

The certificate is not on the box, it´s on the webserver, so I do not have an SSL profile applied too. And if I apply any http profile the connection doesn´t work, and I cannot enter in the website.

There is any event different from HTTP_REQUEST that can I use to do this selection of pool?

Regards.
application delivery
dev
devops
iRules

2 Replies

Sort By
  • spark_86682's avatar
    spark_86682
    Historic F5 Account
    Jun 27, 2008
    If you need the BIG-IP to do pool selection based on the URI of the HTTP request, then the BIG-IP will need to decrypt the SSL stream to access the URI, and the only way for that to happen is if you install the certificate and key on the BIG-IP. There's no way to access any part of the HTTP request otherwise. Once you do that, you can apply an HTTP profile and use this iRule just as on a non-SSL virtual server. If you need the data to be encrypted between the BIG-IP and the server, then you can also apply a serverssl profile to accomplish this.

     

     

    Hope this helps!
  • ukstin's avatar
    ukstin
    Icon for Nimbostratus rankNimbostratus
    Jun 27, 2008
    Thanks spark,

     

     

    I´ve installed the certificate and create a client and server ssl profile, so this way I could apply an http profile and consequently the i-rule.

     

     

    thanks for your help.