topic Re: CSS HTTP to HTTPS redirect in Application Networking

CSS HTTP to HTTPS redirect

tjcouey — Wed, 30 Jan 2008 18:57:19 GMT

How do you configure a redirect on the CSS content rules? I want traffic that is destined for http://my.website.com to be redirected to https://my.website.com. I have found references to using a redirect service but it will not let me redirect to an address that is being used as a local VIP.

thx.

Re: CSS HTTP to HTTPS redirect

diro — Thu, 31 Jan 2008 09:08:20 GMT

This is one way

**************************

SERVICE

**************************

service secure-transfer

ip address 2.2.2.2

keepalive type none

type redirect

no prepend-http

domain https://my.website.com

active

service regular-server1

ip address 10.2.3.4

active

service regular-server2

ip address 10.2.3.5

active

!***************************

OWNER

***************************

owner CSS-Team

content default-redirect

vip address 206.25.90.84

protocol tcp

port 80

url "/*"

add service secure-transfer

active

content ssl-rule

vip address 206.25.90.84

protocol tcp

port 443

add service regular-server1

add service regular-server2

active

Re: CSS HTTP to HTTPS redirect

Gilles Dufour — Thu, 31 Jan 2008 09:28:20 GMT

http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a00801de8d6.shtml

Re: CSS HTTP to HTTPS redirect

tjcouey — Thu, 31 Jan 2008 15:12:40 GMT

But i'm using an ssl-proxy-list. I thought that i had to use the port 80 content rule to direct the proxy list traffic to a port 80 backend server. How would it be done in that case?

Thanks in advance!

Re: CSS HTTP to HTTPS redirect

Gilles Dufour — Thu, 31 Jan 2008 16:29:32 GMT

you need to redirect the decrypted traffic to a different port (ie: 81).

So you keep the 80 rule to redirect to https.

The https rule decrypt and forward to the 81 rule which loadbalances to the server on port 80 (don't forget to setup the service with 'port 80').

Gilles.