What are the recommended BIG-IP F5 settings for routing HTTP traffic to ORDS 24.4 without SSL in an Oracle EBS-integrated environment?
Thanks to Peter from ORDS team for this info
Just two settings for the upstream traffic:
- Set the Host header to the HTTPS hostname so that the generated links produced by ORDS contains the hostname that the client used.
- Set the X-Forwarded-Proto header value to https
Important configuration setting for the ORDS instances:
ords config set security.httpsHeaderCheck "X-Forwarded-Proto: http"
That tell ORDS that even though it is listening for HTTP traffic, the request was received by the LB over HTTPS and therefore it can consider the transport secure.