cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1642
Views
0
Helpful
7
Replies

ACE maintenance page for HTTPS connection (non offloaded mode)?

cciesp-me
Level 1
Level 1

Hello experts

how do we configure a "redirected" maintenance page for HTTPS Serverfarm when the serverfarm is down/probefailed?

lets say users are accessing https://xyz.com, and if the serverfarm is down, I want users to get redirected to https://abc.com or even http://abc.com

(getting a certificate error or a https to http redirection error is acceptable)

What i understand from TAC, since we are not terminating SSL on ACE, we have few restrcitions on using redirect. Thereafter, TAC hasnt been too helpful on this query.

HTTPS connection is directly terminated on Server with certificate.  And we are using SSL Session Stickyness on ACE  (I know not the best thing to do..)

Pls. assist.

2 Accepted Solutions

Accepted Solutions

Cesar Roque
Level 4
Level 4

Hello,

If the ACE is not doing SSL termination it can't do the redirect.  But why don't you take advantage of the ACE hardware and apply the SSL termination in the ACE?

That way you will be releasing resources from the servers

--------------------- Cesar R ANS Team

View solution in original post

That's what I wrote above; there is no way to do it with any loadbalancer on the market if you don't perform SSL termination.

View solution in original post

7 Replies 7

parcvista
Level 1
Level 1

Hi just a quick thought, how about create a redirect server farm (to https://abc.com) and configure it as the backup farm for https://xyz.com?

Once you don't terminate anything on the ACE; the ACE won't help you in this case. The best you can do is do provide a backup serverfarm with another HTTPS service showing a maintenance page or sending a redirect.

You may try create a redirect server farm and configure it as the backup server farm in the stickness group.

Tha ACE won't send any redirect as it operates as layer 4 - SSL bridge

Cesar Roque
Level 4
Level 4

Hello,

If the ACE is not doing SSL termination it can't do the redirect.  But why don't you take advantage of the ACE hardware and apply the SSL termination in the ACE?

That way you will be releasing resources from the servers

--------------------- Cesar R ANS Team

cciesp-me
Level 1
Level 1

so do i assume there is no way to do this without using ACE for SSL termination?

In our case, not using ACE for termiating SSL connections is to draw a line between Network and System administration, a business requirement.

Thanks for your replies.

That's what I wrote above; there is no way to do it with any loadbalancer on the market if you don't perform SSL termination.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: