Problem with REWRITE in Server, probe https

Unanswered Question
Sep 15th, 2009
User Badges:

Dear Mister


I have a service, where the first conection is toward port 80 (HTTP). But, the client and Server negotiate, and start a service https (TLSV1).


What can I do for a probe function with this behavior??


I tried with a probe HTTP, but don't function. The Server is terminating the SSL .


I thing than probe HTTP can resolve this, but, what happens with the first conection http??

Best Regards

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Gilles Dufour Tue, 09/15/2009 - 23:11
User Badges:
  • Cisco Employee,

what device ?

You could combine 2 probes.

One HTTP probe and one HTTPS probe.


Or just use the HTTP probe but if the server sends a redirect you need to set the loadbalancer to expect a 302 response.


Gilles.

rodrigo.hernandez Wed, 09/16/2009 - 05:48
User Badges:

Mister


The equipment is ACE 4710.


Is a rewrite, no redirect. The page change in the same server IP address. The first conection is HTTP, after that, the client negotiate a https conection,y stay functoning in that way.


Best Regards

Gilles Dufour Wed, 09/16/2009 - 06:06
User Badges:
  • Cisco Employee,

you can't switch from http to https without some form of redirect.

You should take a sniffer trace to see what is going on.


Gilles.

rodrigo.hernandez Wed, 09/16/2009 - 06:22
User Badges:

Mister


You are rigth. This is the reply from the server:


######################################

HTTP/1.1 302 Found

Date: Tue, 15 Sep 2009 17:44:17 GMT

Server: IBM_HTTP_SERVER/1.3.28.1 Apache/1.3.28 (Win32)

Location: https://www.xxxxx.cl/script/demos/display_variables.jsp

Keep-Alive: timeout=15, max=100

Connection: Keep-Alive

Transfer-Encoding: chunked

Content-Type: text/html; charset=iso-8859-1


104



302 Found



Found

The document has moved https://www.xxxxx.cl/script/demos/display_variables.jsp">here.




0

########################################


I created a probe HTTP WITH code 302 like answer, but the probe is always inactive.


After that conection start a HTTPS conection.


Your suggestion would create two probes???

One HTTP and another HTTPS. Rigth??? Both probes must to be up for the service function. But, I had the same doubt before. I created a probe HTTP, with expect code 302, and not function. Is mandatory the another probe HTTPS for the first pone be up??


Best Regards

Actions

This Discussion