HTTPS to HTTP in ACE-4710 SSL Offload

nedian123 · ‎12-31-2009

Hello all,

We have a customer having following setup

Client----HTTPS----ACE-----HTTP----Server

Case-1

when a client types the url: https://foo123.com the webpage appears but the url is changed to http://foo123.com/B001....

Case-2

when a client types the url: https://foo123.com/B001 the webpage appears & the url is unchanged

Most probably this is happening b/c the server is redirecting in case-1.....I have checked the documentation & there it says we can modify this behaviour using SSL RE-WRITE...

My query is whether this would be the appropriate way or the application team can stop their server sending redirects......

Suggestions in this regard would be appreciated. Thanks.

Regards,

Akhtar

rvavale · ‎12-31-2009

Hi Akhtar,

Since your doing SSL Termination (offloading) on ACE then because backend (between ACE and Server)
traffic will be clear text its ok for Server to do redirect as HTTP URL.

By configured SSL Rewrite when ACE forwards Redirect location to client it will be HTTPS instead of HTTP.

This link has Sample ACE config with SSL termination and URL rewrite,
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00809c3045.shtml

Note: If the request is not the first request then you need to configure “Persistence rebalance”

Hope this helps,

Best Regards,
Rahul