cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
494
Views
0
Helpful
2
Replies

How do I redirect HTTP connections to the HTTPS domain?

sgonsalv
Level 1
Level 1

Hi Giles,

Firstly we use our CSM module in routed mode.

For the particular issue i'm looking to address we have the following setup:

CLEAR TRAFFIC:

- All HTTP connections are load balanced via the "vserver CLEAR_VIP" to "serverfarm WEBFARM".

- This works in the standard manner

ENCRYPTED TRAFFIC:

- I've also setup a "vserver SSL_VIP" for all the HTTPS traffic, which load balances to "serverfarm SSLFARM".

- This traffic then goes to one of the two SSL modules, and after decryption goes to "vserver DECRYPT_VIP".

- This finally load balances to "serverfarm WEBFARM".

- Again a standard setup which works well, no problems.

QUESTION:

- While our customer will be advertising to have all students use the "encrypted path", there will always be a few that have the "clear path" bookmarked.

- So to address this, our customer would like all "http", port 80 traffic to "vserver CLEAR_VIP" to be redirected to "https", port 443.

- Is there a way in which this can be done??

- I was reading through "Configuring Redirect Virtual Servers", which talks about putting https:// into the relocation string......does this look like a suitable way?

I've attached a copy of our CSM and SSL config, for you to get a better idea of how things are setup.

thanks,

Sheldon

1 Accepted Solution

Accepted Solutions

Gilles Dufour
Cisco Employee
Cisco Employee

you actually found the solution yourself.

You habe to put https:// in the relocation string.

This is how you tell a browser that the traffic needs to be encrypted.

I'm not sure what is the concern or how you expect to do this otherwise.

Thanks,

Gilles.

View solution in original post

2 Replies 2

Gilles Dufour
Cisco Employee
Cisco Employee

you actually found the solution yourself.

You habe to put https:// in the relocation string.

This is how you tell a browser that the traffic needs to be encrypted.

I'm not sure what is the concern or how you expect to do this otherwise.

Thanks,

Gilles.

Hi Giles,

Thats right - that was the fix.

thanks

Sheldon

Review Cisco Networking for a $25 gift card