Reverse-proxy SSL termination and URL path redirect

[astrand]

Hi,

I am looking for a reverse-proxy appliance that can both terminate HTTPS connections and redirect them using HTTP to a server. Depending on the path in the url a different port on the server should be accessed. It should look something like this:

https://www.example.com/user -> http://int-server:80

https://www.example.com/admin -> http://int-server:81

Is there a single Cisco device that can do this or do you know any other product providing this functionality?

Thank you very much in advance!

Regards,

Harald

[Gilles Dufour]

you can do this with a CSS11500 combined with its CSS5-SSL module.

You can also achieve this with a CSM-S or a CSM + SSLM.

With any solution above it would work the same way.

The SSL module will terminate the SSL connection and forward HTTP traffic back to the loadbalancer [CSS or SM].

The loadbalancer can intercept the http request and forward a redirect response as you want it to be.

The cheapest solution would be the 11501 if you do not need too much BW, connections per second.

Regards,

Gilles.

[astrand]

Thank you very much for your answer!

What command would I use on the 11501 to make the url path (directory) redirect?

Regards,

Harald

[astrand]

Thank you very much for your answer!

What command would I use on the 11501 to make the url path (directory) redirect?

Regards,

Harald

[Gilles Dufour · Accepted solution]

the configuration would be the same on any css.

So here is a link that will show you how to do this.

http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a00801de8d6.shtml

Regards,

Gilles.

[ct_yau]

Dear Gilles,

I have CSS11501's without SSL modules in production. I would like to ask if I need SSL one day and add SCA to the CSS11501's, would it be very different from the CSS11500's with SSL modules? I understand that CSS11501 has an option with SSL modules but once I ordered the CSS11501 without SSL modules I can only add SCA externally.

Could you give some high-level descriptions of the difference on the capability, configuration effort, performance and managability aspects.

Thank you!

CT Yau

Hong Kong

[Gilles Dufour]

you get more or less the same functionality and the same performance with one or the other.

The only difference is that with SCA it means you have 2 devices, so more rack space required,2 devices to manage, ...

Regards,

Gilles.