Forum Discussion
nitass
Feb 15, 2013Employee
can we combine them like this?
[root@ve10:Active] config b virtual bar list
virtual bar {
snat automap
destination 172.28.19.252:443
ip protocol 6
rules myrule
profiles {
clientssl {
clientside
}
http {}
tcp {}
}
}
[root@ve10:Active] config b rule myrule list
rule myrule {
when HTTP_REQUEST {
if { !([HTTP::uri] starts_with "/content/") } {
HTTP::redirect "https://newhost.test"
return
}
if { [IP::addr [IP::client_addr] equals 172.28.65.0/24] } {
pool POOL_ADDRESS
}
}
}
[root@ve10:Active] config b pool POOL_ADDRESS list
pool POOL_ADDRESS {
members 200.200.200.101:80 {}
}
redirect
[root@centos ~] curl -Ik https://host.test/something
HTTP/1.0 302 Found
Location: https://newhost.test
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
/content/Admin.aspx
[root@ve10:Active] config ssldump -Aed -nni 0.0 port 443 or port 80 -k /config/ssl/ssl.key/default.key
New TCP connection 1: 172.28.65.147(58214) <-> 172.28.19.252(443)
1 1 1360935396.3755 (0.0180) C>S SSLv2 compatible client hello
1 2 1360935396.3755 (0.0000) S>CV3.1(81) Handshake
1 3 1360935396.3755 (0.0000) S>CV3.1(953) Handshake
1 4 1360935396.3755 (0.0000) S>CV3.1(4) Handshake
1 5 1360935396.3775 (0.0020) C>SV3.1(262) Handshake
1 6 1360935396.3775 (0.0000) C>SV3.1(1) ChangeCipherSpec
1 7 1360935396.3775 (0.0000) C>SV3.1(36) Handshake
1 8 1360935396.3960 (0.0185) S>CV3.1(1) ChangeCipherSpec
1 9 1360935396.3960 (0.0000) S>CV3.1(36) Handshake
1 10 1360935396.3975 (0.0014) C>SV3.1(190) application_data
---------------------------------------------------------------
HEAD /content/Admin.aspx HTTP/1.1
User-Agent: curl/7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5
Host: host.test
Accept: */*
---------------------------------------------------------------
New TCP connection 2: 200.200.200.10(58214) <-> 200.200.200.101(80)
1360935396.3986 (0.0010) C>S
---------------------------------------------------------------
HEAD /content/Admin.aspx HTTP/1.1
User-Agent: curl/7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5
Host: host.test
Accept: */*
---------------------------------------------------------------