RE: [load balancing] HTTP to HTTPS redirect

From: Drumm, Dan (ddrummIZZATball.com)
Date: Fri Jun 13 2003 - 18:24:39 EDT

  • Next message: Drumm, Dan: "RE: [load balancing] HTTP to HTTPS redirect"

    I tried this, putting a virtual server in for the ip address on port 80,
    then pointing it to a pool with all members down (fake members).
     
    I put the ip address of the SSL proxy (xx.xx.xx.xx:443) in the field forthe
    fallback host.
     
    I don't seem to be getting the 302 redirect or anything. Is there some trick
    in getting this to work?

    -----Original Message-----
    From: Cauthorn, Matt (MAN-Corporate) [mailto:Matt.CauthornIZZATcox.com]
    Sent: Friday, June 13, 2003 3:38 PM
    To: 'lb-lIZZATvegan.net'
    Subject: RE: [load balancing] HTTP to HTTPS redirect

    You can setup a pool which points to a 'fake' node/service, then use the
    fallback host option in your pool config to redirect all the clients to the
    https, since the node will be deemed as down to the BigIP. I use this for
    several things, and have had great luck.
     
    Matt
     

     -----Original Message-----
    From: Drumm, Dan [mailto:ddrummIZZATball.com]
    Sent: Friday, June 13, 2003 4:53 PM
    To: 'lb-lIZZATvegan.net'
    Subject: [load balancing] HTTP to HTTPS redirect

    I am trying to LB two MS-IIS servers, and use the SSL proxy on a F5 BIGIP
    2000.

    The SSL proxy works fine, and I am having the F5 "redirect all" under the
    advanced options.

    All of the http links being served are being rewritten to https links.
    Except for one thing.
    The web page serves up a java applet, and that applet creates a menu
    dropdown bar.
    The links in that bar all point to " http://foo.bar.com <http://foo.bar.com>
    ". I can't edit the java applet.

    I don't have a virtual server on port 80 for http://foo.bar.com
    <http://foo.bar.com> .

    Is there a simple way to redirect all incoming http requests to
    http://foo.bar.com/somepath/something
    <http://foo.bar.com/somepath/something> to https and hit the SSL proxy on
    the F5 - without losing the path information?

    The F5 doesn't allow you to build a proxy and point it to another proxy on
    the same unit.

    ____________________
    The Load Balancing Mailing List
    Unsubscribe: mailto:majordomoIZZATvegan.net?body=unsubscribe%20lb-l
    Archive: http://vegan.net/lb/archive
    LBDigest: http://lbdigest.com
    MRTG with SLB: http://vegan.net/MRTG
    Hosted by: http://www.tokkisystems.com

    This archive was generated by hypermail 2.1.4 : Fri Jun 13 2003 - 18:34:41 EDT