Redirect HTTPS?

[KristofB]

Hello,

Is it possible to redirect HTTPS ?

Goal is, an 'old' HTTPS VIP - no ssl offloading on ACE - needs to redirect to HTTP url. This doesn't seem to work by default.

My VIP listens to https, and rserver is a webhost-redirection http://xxxx (test with https also negative)

Any solution/workaround for this?

Regards Kristof

[Francesco Casotto]

Kristof,

in order to be able to perform a http redirection you need to SSL-terminate the connection on the ACE. The point is that unless the ace terminates the SSL connection it will not have access to the underlying encrypted HTTP session, so it will not be able to see the http request and it will not be able to issue an http redirect.

When a client connects to an https service just after the TCP handshake it would start the SSL handshake and until the ssl handshake is successfully completed there is no possibility to send any http redirect.

So if you wish to redirect you need to implement ssl termination on the ACE.

Hope it helps,

Francesco