redirect and or sorry server with ssl

[rich.polyak]

Will a service type of redirect work with a ssl rule? If the 2 primary services ws1_ssl and ws2_ssl go down would this redirect work for the ssl rule?

And would a sorry server work with the redirect service?

service ws1_ssl

ip address xx.xx.xx.xx

keepalive type script ap-kal-ssl "xx.xx.xx.xx"

active

service ws2_ssl

ip address xx.xx.xx.xx

keepalive type script ap-kal-ssl "xx.xx.xx.xx"

active

service redirect

type redirect

ip address 1.1.1.2

domain xx.xx.xx.xx

keepalive type none

active

content ssl

vip address x.x.x.x

application ssl

advanced-balance ssl

add service ws1_ssl

add service ws2_ssl

add service redirect

vip-ping-response local-remote

url "/*"

protocol tcp

port 443

active

[Gilles Dufour]

won't work because this is SSL [encrypted] traffic.

The CSS can't encrypt the redirect and forward it to the client.

You could use a sorryserver and have a 3rd server receive the traffic, decrypt it, and send an encrypted redirect or message.

Gilles.