topic Re: http -> http redirection using header-field rule in Application Networking

http -> http redirection using header-field rule

michael.e.reid — Thu, 07 Dec 2006 11:58:51 GMT

Hi,

Is it possible to configure an http -> http redirection using header-field rules if the CSS is NOT performing the SSL encryption/decryption ?

We can get the redirect working not using the header-field rule but not with it configured.

cheers,

Mike

Re: http -> http redirection using header-field rule

Gilles Dufour — Thu, 07 Dec 2006 14:26:50 GMT

Mike,

it should be possible.

Do you see it on your header-field rule ?

Can we see the config ?

Thanks,

Gilles

Re: http -> http redirection using header-field rule

michael.e.reid — Fri, 08 Dec 2006 08:42:44 GMT

Gilles,

The header-field rule works to redirect the http traffic to a specific service, but we also want the header-field rule config under the port 443 content rule.

Can the CSS see the header or is it encrypted ?

---------------------------------------------

service 10.10.10.1-443

ip address 10.10.10.1

protocol tcp

port 443

keepalive maxfailure 2

keepalive retryperiod 45

keepalive frequency 45

keepalive type script testscript "10.10.10.1 4000 3179 archepns"

active

service 10.10.10.2-443

ip address 10.10.10.2

protocol tcp

port 443

keepalive maxfailure 2

keepalive retryperiod 45

keepalive frequency 45

keepalive type script testscript "10.10.10.2 4000 3179 archepns"

active

service archepns_redirect

keepalive type none

type redirect

no prepend-http

ip address 1.1.1.1

domain https://www-knowledge-epe.company.com

active

**********************************************

header-field-group archepns_url

header-field Request-Line request-line contain "/archepns"

header-field-group archepns_url2

header-field Request-Line request-line contain "/archepns"

**********************************************

content archepns-redirect-sso

vip address 20.20.20.1

protocol tcp

port 80

url "/*"

header-field-rule archepns_url weight 0

add service archepns-redirect

active

content archepns-443

vip address 20.20.20.1

port 443

url "/*"

header-field-rule archepns_url weight 0

add service 10.10.10.1-443

active

content archepns-redirect-sso

vip address 20.20.20.1

protocol tcp

port 80

url "/*"

header-field-rule archepns_url2 weight 0

add service archepns-redirect

active

content archepns-443

vip address 20.20.20.1

port 443

url "/*"

header-field-rule archepns_url2 weight 0

add service 10.10.10.2-443

active

Re: http -> http redirection using header-field rule

Gilles Dufour — Fri, 08 Dec 2006 09:12:44 GMT

the http header is encrypted.

This is why it won't work without an ssl module.

Gilles.

Re: http -> http redirection using header-field rule

michael.e.reid — Fri, 08 Dec 2006 09:29:44 GMT

Yep, we have an SSL module so it is OK to do this then. We just didn't use it for our tests.

cheers,

Mike