I have a CSS11501 with the on-board SSL module.
The device is configured with the relevant ss-proxy-list,ssl services and content rules to receive https sessions, decrypt them and pass them onto backend http Web servers - this is working ok.
However, the customer also wants any normal http sessions sent from the users browser to be re-written to https - this is to cater for the situation where the user accidently types a http url instead of using https. e.g.
//http:www.mydomain.com/webstuff/content.html
should be:
//https:www.mydomain.com/webstuff/content.html
From the documentation I have read it appears to me that the 'urlrewrite' command does exactly this.
However, I have configured this in my ssl-proxy-list but it doesn't seem to work - a browser session using http just times-out and doesn't get re-directed to https.
Have I got the correct command..?
My relevant config bits are below:
ssl-proxy-list ssl_listxxxx
ssl-server 33
ssl-server 33 vip address xxx.xxx.xxx.xxx
ssl-server 33 rsacert my_cert
ssl-server 33 rsakey my_key
ssl-server 33 cipher rsa-export-with-rc4-40-md5 xxx.xxx.xxx.xxx 80
ssl-server 33 urlrewrite 1 www.mydomain.com
active
service ssl-serxxxx
type ssl-accel
slot 2
keepalive type none
add ssl-proxy-list ssl_listxxxx
active
content ssl-content
vip address xxx.xxx.xxx.xxx
port 443
protocol tcp
add service ssl-serxxxx
application ssl
advanced-balance ssl
active
content backed-http-content
add service http-content-1
add service http-content-1
protocol tcp
port 80
url "/webstuff*"
advanced-balance sticky-srcip-dstport
vip address xxx.xxx.xxx.xxx
active
Thanks....John
