Rewrite HTTPS to HTTP preserving HTTPS in the URL

Question

Hi, &nbsp;
Are we able to use a pool listening on port 80 on a HTTPS VS listener.&nbsp;
What we want is to keep the URL secured in https while the traffic will be served from a pool running on port 80 &nbsp;
Is this doable ?&nbsp;

milk_man · Answer

So you want to have SSL on the clientside, but decrypt on the backend?&nbsp;
If so, this is called SSL offload and is a very easy thing to do by having a clientside SSL profile but not putting one on the serverside.&nbsp;
The only thing to watch out for are embedded URL references in your HTML code, or Location headers that don't include https:// schema.&nbsp;

milk_man_61922 · Answer

So you want to have SSL on the clientside, but decrypt on the backend?&nbsp;
If so, this is called SSL offload and is a very easy thing to do by having a clientside SSL profile but not putting one on the serverside.&nbsp;
The only thing to watch out for are embedded URL references in your HTML code, or Location headers that don't include https:// schema.&nbsp;

moinul_rony · Answer

I can confirm that the URL references will be unchanged and be still on http:// .. Can you point me to any documentation that shows a optimal way of SSL offloading from a HTTPS VS to a HTTP Pool ?

Thanks.

moinul_rony · Answer

I can confirm that the URL references will be unchanged and be still on http:// .. Can you point me to any documentation that shows a optimal way of SSL offloading from a HTTPS VS to a HTTP Pool ?

Thanks.

milk_man_61922 · Answer

Are the URL references relative (ie. /path/file.html) or definitive (eg. http://host.com/path/file.html)? If it's the latter, you will need a stream profile similar to what has been described in this devcentral post:

https://devcentral.f5.com/questions/irule-for-rewriting-http-request-with-https-request

Forum Discussion

Rewrite HTTPS to HTTP preserving HTTPS in the URL

7 Replies

Recent Discussions

ASM instance creation

[ASM] - what is "Browser Challange file" ?

[ASM] - HTML5 Cross-Domain Request Enforcement - CLI command

Reverse Proxy Not Behaving

Stable Firmware for F5

Related Content

HTTP POST redirect preserving POST data

Rewrite HTTP Redirect Hostname

HTTP to HTTPS Redirect Rewrite plus port change

HTTP Multipart and Security Implications

Rewrite profile statistics in ltm