cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
376
Views
0
Helpful
1
Replies

CSS SSL re-write

wilsons5
Level 1
Level 1

I am in the process of replacing my present css with the newer 11503s with SSl offload capability. I did some initial testing and was unable to perform the url rewrite. I did some research and found that the web server must give a 300 code redirect to make the CSS re-write and HTTP link.

Is therea design plan available which will allow the web server, which doesn't send a 300 code for an link- especially the ones with HREF- the ability to convert http to https and still maintain the session.

I am trying to use 2 CSS11503s in a one arm design, with the css performing the SSL offload. The css encrypts the first page, but doesn't encrypt the links which use HREF.

Any ideas?

1 Reply 1

Gilles Dufour
Cisco Employee
Cisco Employee

The SCA is the only ssl offloader that will rewrite any HREF.

But this requires inspection of every packet sent by the server and has a huge impact on performance.

Therefore nobody uses this feature except people for which performance is not a requirement.

So, in your case, you should redesign your webserver to send correct HREF.

You should never use direct link like http://.... but instead relative link like ../../...

Regards,

Gilles.

Review Cisco Networking for a $25 gift card