cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
640
Views
0
Helpful
6
Replies
Highlighted
Beginner

Reverse-proxy SSL termination and URL path redirect

Hi,

I am looking for a reverse-proxy appliance that can both terminate HTTPS connections and redirect them using HTTP to a server. Depending on the path in the url a different port on the server should be accessed. It should look something like this:

https://www.example.com/user -> http://int-server:80

https://www.example.com/admin -> http://int-server:81

Is there a single Cisco device that can do this or do you know any other product providing this functionality?

Thank you very much in advance!

Regards,

Harald

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

the configuration would be the same on any css.

So here is a link that will show you how to do this.

http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a00801de8d6.shtml

Regards,

Gilles.

View solution in original post

6 REPLIES 6
Highlighted
Cisco Employee

you can do this with a CSS11500 combined with its CSS5-SSL module.

You can also achieve this with a CSM-S or a CSM + SSLM.

With any solution above it would work the same way.

The SSL module will terminate the SSL connection and forward HTTP traffic back to the loadbalancer [CSS or SM].

The loadbalancer can intercept the http request and forward a redirect response as you want it to be.

The cheapest solution would be the 11501 if you do not need too much BW, connections per second.

Regards,

Gilles.

Highlighted

Thank you very much for your answer!

What command would I use on the 11501 to make the url path (directory) redirect?

Regards,

Harald

Highlighted

Thank you very much for your answer!

What command would I use on the 11501 to make the url path (directory) redirect?

Regards,

Harald

Highlighted

the configuration would be the same on any css.

So here is a link that will show you how to do this.

http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a00801de8d6.shtml

Regards,

Gilles.

View solution in original post

Highlighted

Dear Gilles,

I have CSS11501's without SSL modules in production. I would like to ask if I need SSL one day and add SCA to the CSS11501's, would it be very different from the CSS11500's with SSL modules? I understand that CSS11501 has an option with SSL modules but once I ordered the CSS11501 without SSL modules I can only add SCA externally.

Could you give some high-level descriptions of the difference on the capability, configuration effort, performance and managability aspects.

Thank you!

CT Yau

Hong Kong

Highlighted

you get more or less the same functionality and the same performance with one or the other.

The only difference is that with SCA it means you have 2 devices, so more rack space required,2 devices to manage, ...

Regards,

Gilles.

Content for Community-Ad
This widget could not be displayed.