Configure an HTTPS virtual server to accept HTTP traffic

A user might attempt to access a secure website by sending an HTTP request. You can drop such requests or redirect the request to the secure website. In earlier releases, to redirect the request to the secure website, you were required to do the following:

  • Add HTTP and HTTPS virtual servers with the same IP address but different ports.
  • Add a responder action that redirects all traffic to the HTTPS virtual server.
  • Add a responder policy specifying the preceding action, and bind the policy to the HTTP virtual server.

From release 11.1, you can configure an HTTPS virtual server to also process all HTTP traffic. That is, if HTTP traffic is received on the HTTPS virtual server, the appliance internally prepends https:// to the incoming URL or redirects the traffic to another HTTPS URL, depending on the option configured.

Two new parameters,  httpsRedirectUrl and redirectFromPort  are added to the add lb vserver command.

  • redirectFromPort: All HTTP traffic received on this port is prefixed with https:// in the URL and redirected. If you do not specify the redirect URL, the traffic is redirected to the virtual server IP address.
  • httpsRedirectUrl: All HTTP traffic received on the port specified in the -redirectFromPort parameter is redirected to this URL. For example, all HTTPS traffic received on http://www.example.com is redirected to https://www.sample.com.

Configure HTTP to HTTPS redirect by using the CLI

At the command prompt, type:

add lb vserver <name> <serviceType> -redirectFromPort <port | *>  -httpsRedirectUrl <URL>

Example:

> add lbvserver lbvip2 SSL 1.2.1.2 443 -redirectFromPort 80 -httpsRedirectUrl https://www.example.com`

Done

Configure HTTP to HTTPS redirect by using the GUI

  1. Navigate to Traffic Management > Load Balancing > Virtual Servers.
  2. Add a virtual server of type SSL and click OK.
  3. Edit Basic Settings, click More, and add values for Redirect From Port and HTTPS Redirect URL.

Configure an HTTPS virtual server to accept HTTP traffic