url not working in CSS

kelvin-yeo · ‎03-08-2006

Hi forum,

i have program my CSS for this,

content URL

vip address 192.168.99.90

add service url1

add service url2

protocol ssl

port 443

url "/servlet/LiveGiverServlet"

balance aca

active

content SSL

vip address 192.168.99.90

add service ssl1

add service ssl2

protocol ssl

port 443

url "/*"

balance aca

active

I wanted client's https request that contain "/servlet/LiveGiverServlet" to use content URL. While https request that do not contain that url to use content SSL.

But i realise there dont seems to have hits in both service url1 & url2 when client did request for https://www.x.com/servlet/LiveGiverServlet

PLease advise if the config is workable.

Gilles Dufour · ‎03-09-2006

the short answer is - can't work.

One of the reason to use SSL, is to prevent people to see the information you send and receive to/from a website.

Therefore, if the data is encrypted and nobody can't see the content, this is true of the CSS [or any other loadbalancer], and the CSS can't see the url and determine which rule to use, so we select the generic one.

If you want to use such a config, you need an ssl module loaded with the certificate and key from the server in order to decrypt the traffic.

Regards,

Gilles.

kelvin-yeo · ‎03-10-2006

Dear gdufour,

Both our CSS purchase with ssl module.

SO this means that above config should work?

ps. both CSS have cert signed by verisign. not from server....

confused

Gilles Dufour · ‎03-13-2006

it should work if you configure the SSL module.

You did not provide the ssl module config part.

Gilles.