Re: HTTP header to insert for SSL offload
"Rosenberry, Eric" <[email protected]>
| Newsgroups | gmane.comp.programming.load-balancing.general |
|---|---|
| Message-ID | <[email protected]> |
We are using F5's. The application is written in house, so the developer just coded it for me as SSL_OFFLOAD:TRUE (and I made him put that value into a config file so that we can change it if need be) -Eric From: [email protected] [mailto:[email protected]] On Behalf Of Tony Bourke Sent: Monday, April 27, 2009 5:20 PM To: Load Balancing Mailing List Subject: Re: [load balancing] HTTP header to insert for SSL offload Hi Eric, Great to see a fellow Portlander on the list. I'm not aware if there's a standard header, but SSL_OFFLOAD seems reasonable. The real trick is if the application knows to look for that, or any other header, in order to trigger link creation with https://. Some web apps, like Microsoft OWA, don't, and instead use a registry setting: http://support.microsoft.com/kb/327800 What load balancer are you using? Some will intercept the HTTP content going back to the client and re-write URLs with HTTPS. Tony On Apr 27, 2009, at 4:22 PM, Rosenberry, Eric wrote: We are having a problem with a new application being written in house whereby the application generates all redirects with http:// links instead of https:// links. The application has no idea that it is being front-ended by a SSL offloading load balancer. The solution I find out on the Internet is to have the load balancer insert some kind of header into each request to tell the application to generate all redirects with https:// instead of http. My question to the list: Is there a standard header recommended for this purpose, or does everyone make up their own? I see several references to this online. I believe Citrix recommends "SSL_OFFLOAD". Any suggestions? Thanks! -Eric _______________________________________________________________ Eric Rosenberry Sr. Network Engineer | Chief Bit Plumber Direct +1. 503.943.6763 | Mobile: +1.503.348.3625 | Fax: +1.503.224.1581 iovation 111 SW Fifth Avenue Suite 3200 Portland, OR 97204 www.iovation.com<http://www.iovation.com/> The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this email message in error, please notify the sender by reply email and delete the message and any attachments. _______________________________________________ lb-l mailing list [email protected]<mailto:[email protected]> http://vegan.net/mailman/listinfo/lb-l Searchable Archive: http://vegan.net/lb/archive http://lbdigest.com Load Balancing Digest http://lbwiki.com Load Balancing Wiki _______________________________________________ lb-l mailing list [email protected] http://vegan.net/mailman/listinfo/lb-l Searchable Archive: http://vegan.net/lb/archive http://lbdigest.com Load Balancing Digest http://lbwiki.com Load Balancing Wiki