Specifications

Pools
BIG-IP® Reference Guide 4-41
Rewriting HTTP redirection
Sometimes, a client request is redirected from the HTTPS protocol to the
HTTP protocol, which is a non-secure channel. If you want to ensure that
the request remains on a secure channel, you can cause that redirection to be
rewritten so that it is redirected back to the HTTPS protocol. Also, through
the rewriting of redirections, you can rewrite a port number or a URI path.
You can rewrite HTTP redirections in either of two ways:
◆ You can create an SSL Accelerator proxy and configure the rewriting of
HTTP redirections as a proxy option. For more information, see
Rewriting HTTP redirection, on page 4-105.
◆ If your web server is an IIS server, you can configure that server, instead
of your SSL proxy, to rewrite any HTTP redirections. Part of this IIS
server configuration includes the installation of a special BIG-IP filter,
redirectfilter.dll, on the IIS server. The following section provides this
IIS configuration procedure.
To install the filter for rewriting HTTP redirection
To install the ISAPI filter (redirectfilter.dll) for use with a Microsoft
Internet Information Server (IIS) version 4.0 or 5.0, follow these steps:
1. Copy the filter DLL to an appropriate folder, such as the SCRIPTS
or CGI-BIN subdirectory.
2. Open the Internet Service Manager (MMC).
3. Select the appropriate level for the ISAPI filter:
a) If you intend to use the ISAPI filter with all Web sites, select the
ServerName icon.
b) If you intend to use the ISAPI filter with a specific Web site,
select the icon for that Web site (for example, the default Web
site).
4. Right-click the level (icon) that you selected.
5. Click the ISAPI Filters tab.
Note: To configure an ISAPI filter for all Web sites, first click the
Edit button that is next to the Master Properties of the WWW
Service.
6. Click Add.
7. Type a name for the ISAPI filter.
8. Click Browse and select the ISAPI filter that you copied in step 1.
9. Click OK.
10. Stop the IISADMIN service. To do this, either type net stop
iisadmin /y at a command prompt, or use the Services applet that is
located in Control Panel (in Windows NT 4.0) or Administrative
Tools (in Windows 2000).