Forum Discussion

Tim_Brown's avatar
Tim_Brown
Icon for Nimbostratus rankNimbostratus
Nov 08, 2005

Redirecting HTTPS to HTTP without SSL offload

I'm sure this has been covered in the past, and if so please just point me to the post (my forum search resulted with too many hits).

 

 

My question: Is it possible to redirect client request to a virtual listening on 443 to 80 without accepting the connection, sending a 302 redirect, and terminating the connection. We're trying to avoid having to purchase yet another cert.

 

 

Thx in advance.
application delivery
dev
devops
iRules

3 Replies

Sort By
  • Brian_Gupta_115's avatar
    Brian_Gupta_115
    Icon for Nimbostratus rankNimbostratus
    Nov 08, 2005
    No, unfortunately, the SSL negotiation between the browser and the BigIP has to occur first. -Brian
  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Nov 08, 2005
    When you say, "another cert", I'm assuming you already have one and you are terminating it on the BigIP? If so, you could always use that cert to terminate the SSL and then do the redirect, but I'm not sure how you have your domains set up...
  • Tim_Brown's avatar
    Tim_Brown
    Icon for Nimbostratus rankNimbostratus
    Nov 09, 2005
    Essentially the cert will be expiring and the customer as indicated that the SSL side of the site is no longer necessary. They would prefer to save the cost of the cert as well as avoid having to notify their customers of the site change.