topic Re: how to force https using ACE module? in Application Networking

how to force https using ACE module?

majaj — Tue, 26 Jan 2010 08:20:56 GMT

hi,

i have one requirment from the customer to force https for web site sections that require authentication

all web site sections that require authentication end with login.aspx

for example:

www.cisco.com/staff/login/login.aspx

www.cisco.com/empl/login/login.aspx

how to force redirection from http to https for any url end with login.aspx

i don't want any user to authenticate using http.

thanks in advance for your help

best regards,

Re: how to force https using ACE module?

bshellrude — Thu, 28 Jan 2010 17:55:30 GMT

Something like:

rserver redirect HTTP-to-HTTPS
webhost-redirection https://%h%p 301
inservice

serverfarm redirect HTTP-to-HTTPS
rserver HTTP-to-HTTPS
inservice

class-map type http loadbalance match-any L7CLASS-REDIRECT-HTTP-to-HTTPS
match http url .*/login.aspx

policy-map type loadbalance first-match L7POLICY-REDIRECT-HTTP-to-HTTPS
class L7CLASS-REDIRECT-HTTP-to-HTTPS
serverfarm HTTP-to-HTTPS

policy-map multi-match L3IngressPolicy

class L4VIP-SOME-VIP-CLASS
    loadbalance vip inservice
    loadbalance policy L7POLICY-REDIRECT-HTTP-to-HTTPS
    loadbalance vip icmp-reply
    loadbalance vip advertise active

and then of course having a proper HTTPS policy corresponding with the redirect...

That's how we've got things running anyways...

Re: how to force https using ACE module?

bshellrude — Thu, 28 Jan 2010 18:01:03 GMT

Oh yeah.. and of course

show service detail

Looking for current connections and dropped connections - being your best friend for troubleshooting

Also note, that the capture feature of ACE can be useful too