url routing with ssl questions.

[clayton-price]

Is there anyway I can route traffic to a specific set of servers based on a portion of a url, and then have the traffic remain on that content rule if the connection switches to ssl? For example, I have a layer3 content rule that sends traffic to server A & B, I then have a content rule with the same VIP that includes a url "/test/", this rule sends traffic to server C & D. I want users to remain on C & D when accessing /test/ via https. Is this possible?

I'm assuming an 11500 with an SSL module will let you route based on url for encrpyted traffic. I'm guessing it decrypts the traffic, then matches it against content rules?

Thanks in advance!

Clayton

[Gilles Dufour]

Clayton,

first part (routing based on url) is achievable with a config like this

owner mycompany

content www1

vip add x.x.x.x

proto tcp

port 80

url "/test/*"

!

For the 2nd part, because the traffic is decrypted, you can still

use the same rule above to stick to the same servers based on the

url. If you want to stick to the exact same server, you will have to use

arrowpoint cookies.

Gilles.

[clayton-price]

Thanks!

So the first part, we would be unable to keep them on the same servers once the traffic goes to ssl. We are currently using 11051's with the ssl being termincated on the servers.

Clayton

[Gilles Dufour · Accepted solution]

if SSL is terminated on the server currently, the CSS does not see the url requested. So, you can't route based on the url in this case.

Cookies is also not possible.

Only solution would be to route based on ip source with the command 'balance srcip'

If you get an SCA or migrate to a CSS11500 with an SSL module, than the solution mention previously is posible.

Gilles.