topic ACE maintenance page for HTTPS connection (non offloaded mode)? in Application Networking

ACE maintenance page for HTTPS connection (non offloaded mode)?

cciesp-me — Wed, 05 Sep 2012 09:15:49 GMT

Hello experts

how do we configure a "redirected" maintenance page for HTTPS Serverfarm when the serverfarm is down/probefailed?

lets say users are accessing https://xyz.com, and if the serverfarm is down, I want users to get redirected to https://abc.com or even http://abc.com

(getting a certificate error or a https to http redirection error is acceptable)

What i understand from TAC, since we are not terminating SSL on ACE, we have few restrcitions on using redirect. Thereafter, TAC hasnt been too helpful on this query.

HTTPS connection is directly terminated on Server with certificate. And we are using SSL Session Stickyness on ACE (I know not the best thing to do..)

Pls. assist.

ACE maintenance page for HTTPS connection (non offloaded mode)?

parcvista — Wed, 05 Sep 2012 09:25:04 GMT

Hi just a quick thought, how about create a redirect server farm (to https://abc.com) and configure it as the backup farm for https://xyz.com?

ACE maintenance page for HTTPS connection (non offloaded mode)?

Surya ARBY — Wed, 05 Sep 2012 09:44:38 GMT

Once you don't terminate anything on the ACE; the ACE won't help you in this case. The best you can do is do provide a backup serverfarm with another HTTPS service showing a maintenance page or sending a redirect.

ACE maintenance page for HTTPS connection (non offloaded mode)?

parcvista — Wed, 05 Sep 2012 09:59:56 GMT

You may try create a redirect server farm and configure it as the backup server farm in the stickness group.

ACE maintenance page for HTTPS connection (non offloaded mode)?

Surya ARBY — Wed, 05 Sep 2012 10:23:01 GMT

Tha ACE won't send any redirect as it operates as layer 4 - SSL bridge

ACE maintenance page for HTTPS connection (non offloaded mode)?

Cesar Roque — Wed, 05 Sep 2012 21:07:58 GMT

Hello,

If the ACE is not doing SSL termination it can't do the redirect. But why don't you take advantage of the ACE hardware and apply the SSL termination in the ACE?

That way you will be releasing resources from the servers

Re: ACE maintenance page for HTTPS connection (non offloaded mod

cciesp-me — Thu, 06 Sep 2012 08:39:55 GMT

so do i assume there is no way to do this without using ACE for SSL termination?

In our case, not using ACE for termiating SSL connections is to draw a line between Network and System administration, a business requirement.

Thanks for your replies.

ACE maintenance page for HTTPS connection (non offloaded mode)?

Surya ARBY — Thu, 06 Sep 2012 08:41:32 GMT

That's what I wrote above; there is no way to do it with any loadbalancer on the market if you don't perform SSL termination.