[f-nsp] Rewrite HTTP to HTTPS

Mike Lott lists.accounts at gmail.com
Wed Nov 7 12:24:03 EST 2007


Dave Temkin wrote:
> Here's a sample config taking requests to http://www.sample.com and 
> rewriting them to https://www.sample.com using CSW
> 
> csw-rule "sample-to-ssl" header "Host" equals "www.sample.com"
> 
> csw-policy "ssl-sample.com"
>  match "sample-to-ssl" redirect "www.sample.com" "*" ssl
> 
> server virtual www.sample.com
>  port http csw-policy "ssl-sample.com"
>  port http csw
> 
> 
> Give that a shot.  Do you need the config for actually doing SSL on the 
> VIP with the WSM6-SSL or are you set there?
> 
> -Dave
> 
> 
> 
> 
> 
> On Wed, 7 Nov 2007, Mike Lott wrote:
> 
>> Hi all
>>
>> We have a Foundry ServerIronGT C-Series Switch with two WSM6-SSL and a
>> J-BxGC16 JetCore Gig Copper Module running Version 09.5.02cTD2.
>>
>> SSL termination is handled by the SI. Does anyone have an idea of how to
>> force HTTP requests from a client to a virtual server to HTTPS? For 
>> example:
>>
>> Request: http://www.server.com/
>> Rewritten to: https://www.server.com/
>>
>> I notice that there is URL Rewriting available using CSW, but am unclear
>> as to how to proceed with this as there does not seem to be support for
>> RegEx in the same way that Apache supports it with mod_rewrite.
>>
>> Any clues in the right direction would be great.
>>
>> Thanks,
>>
>> Mike
>> _______________________________________________
>> foundry-nsp mailing list
>> foundry-nsp at puck.nether.net
>> http://puck.nether.net/mailman/listinfo/foundry-nsp
>>
> 

Hi Dave and Wouter

Thanks very much for your help, your replies worked a treat.

@Dave > I have got the SSL termination working on the VIP, thanks :)

Reagrds,

Mike



More information about the foundry-nsp mailing list