09-05-2012 02:15 AM
Hello experts
how do we configure a "redirected" maintenance page for HTTPS Serverfarm when the serverfarm is down/probefailed?
lets say users are accessing https://xyz.com, and if the serverfarm is down, I want users to get redirected to https://abc.com or even http://abc.com
(getting a certificate error or a https to http redirection error is acceptable)
What i understand from TAC, since we are not terminating SSL on ACE, we have few restrcitions on using redirect. Thereafter, TAC hasnt been too helpful on this query.
HTTPS connection is directly terminated on Server with certificate. And we are using SSL Session Stickyness on ACE (I know not the best thing to do..)
Pls. assist.
Solved! Go to Solution.
09-05-2012 02:07 PM
Hello,
If the ACE is not doing SSL termination it can't do the redirect. But why don't you take advantage of the ACE hardware and apply the SSL termination in the ACE?
That way you will be releasing resources from the servers
09-06-2012 01:41 AM
That's what I wrote above; there is no way to do it with any loadbalancer on the market if you don't perform SSL termination.
09-05-2012 02:25 AM
Hi just a quick thought, how about create a redirect server farm (to https://abc.com) and configure it as the backup farm for https://xyz.com?
09-05-2012 02:44 AM
Once you don't terminate anything on the ACE; the ACE won't help you in this case. The best you can do is do provide a backup serverfarm with another HTTPS service showing a maintenance page or sending a redirect.
09-05-2012 02:59 AM
You may try create a redirect server farm and configure it as the backup server farm in the stickness group.
09-05-2012 03:23 AM
Tha ACE won't send any redirect as it operates as layer 4 - SSL bridge
09-05-2012 02:07 PM
Hello,
If the ACE is not doing SSL termination it can't do the redirect. But why don't you take advantage of the ACE hardware and apply the SSL termination in the ACE?
That way you will be releasing resources from the servers
09-06-2012 01:39 AM
so do i assume there is no way to do this without using ACE for SSL termination?
In our case, not using ACE for termiating SSL connections is to draw a line between Network and System administration, a business requirement.
Thanks for your replies.
09-06-2012 01:41 AM
That's what I wrote above; there is no way to do it with any loadbalancer on the market if you don't perform SSL termination.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: