Solved: Full URL re-direct with ACE 4710

networker99 · ‎05-11-2010

Is there anyway to perform a redirect on the ACE 4710 so that it will redirect a request sent to the domain mydomain.com be redirected to www.mydomain.com, this is so that an installed SSL certificate will match.

Thanks

Gilles Dufour · ‎05-12-2010

Then simply configure a redirect.

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/command/reference/realserv.html#wp1019615

rserver redirect HTTP-REDIRECT
webhost-redirection https://www.mydomain.com%p
serverfarm redirect SF_REDIRECT

rserver HTTP-REDIRECT
inservice

Gilles.

View solution in original post

Gilles Dufour · ‎05-12-2010

The problem is that you will see the domain name only after decrypting the traffic.

So, the redirect, even if it can be done on the ACE, is uselss.

The browser will complain before receiving the redirect.

You can get an ssl certificate which contains multiple domain...something like *.domain.com.

Like this the browser will not complain.

This is called Wildcard SSL Certificates

You could also remove your dns entry for domain.com...this will force users to type the full name to get the ip address.

Gilles.

networker99 · ‎05-12-2010

Thank you for your response, but the redirect would occur before any encyption.. for example today this is what happens

someone goes to

http://www.mydomain.com

and the ACE redirects the connection to

https://www.mydomain.com

What I want is for someone to go to

http://mydomain.com (without the www) and for it to redirect to

http://www.mydomain.com which will inturn redirect to https://www.mydomain.com

or it can just redirect to https://www.mydomain.com

So the encryption will not occur until it is redirected to teh correct websit

Gilles Dufour · ‎05-12-2010

Then simply configure a redirect.

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/command/reference/realserv.html#wp1019615

rserver redirect HTTP-REDIRECT
webhost-redirection https://www.mydomain.com%p
serverfarm redirect SF_REDIRECT

rserver HTTP-REDIRECT
inservice

Gilles.

networker99 · ‎05-12-2010

Thanks!,.. am I correct in thinking in the example below the %p is what is going to insert the full URP into the users browser?

rserver redirect HTTP-REDIRECT
webhost-redirection https://www.mydomain.com%p
serverfarm redirect SF_REDIRECT

rserver HTTP-REDIRECT
inservice