CSS HTTP to HTTPS redirect

[tjcouey]

How do you configure a redirect on the CSS content rules? I want traffic that is destined for http://my.website.com to be redirected to https://my.website.com. I have found references to using a redirect service but it will not let me redirect to an address that is being used as a local VIP.

thx.

[diro]

This is one way

**************************

SERVICE

**************************

service secure-transfer

ip address 2.2.2.2

keepalive type none

type redirect

no prepend-http

domain https://my.website.com

active

service regular-server1

ip address 10.2.3.4

active

service regular-server2

ip address 10.2.3.5

active

!***************************

OWNER

***************************

owner CSS-Team

content default-redirect

vip address 206.25.90.84

protocol tcp

port 80

url "/*"

add service secure-transfer

active

content ssl-rule

vip address 206.25.90.84

protocol tcp

port 443

add service regular-server1

add service regular-server2

active

[tjcouey]

But i'm using an ssl-proxy-list. I thought that i had to use the port 80 content rule to direct the proxy list traffic to a port 80 backend server. How would it be done in that case?

Thanks in advance!

[Gilles Dufour]

you need to redirect the decrypted traffic to a different port (ie: 81).

So you keep the 80 rule to redirect to https.

The https rule decrypt and forward to the 81 rule which loadbalances to the server on port 80 (don't forget to setup the service with 'port 80').

Gilles.

[Gilles Dufour]

http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a00801de8d6.shtml