Re: HTTP header to insert for SSL offload

It's good that you have access to code. Sometimes rewrite will work but 
most will only rewrite standard HTML based URL. Stuff that's in scripts 
or XML may not get rewritten and if you've client ide scripts generating 
the URLs then fuggedaboutit.

Rosenberry, Eric wrote:
>
> We are using F5’s.
>
> The application is written in house, so the developer just coded it 
> for me as SSL_OFFLOAD:TRUE
>
> (and I made him put that value into a config file so that we can 
> change it if need be)
>
> -Eric
>
> *From:* [email protected] [mailto:[email protected]] *On 
> Behalf Of *Tony Bourke
> *Sent:* Monday, April 27, 2009 5:20 PM
> *To:* Load Balancing Mailing List
> *Subject:* Re: [load balancing] HTTP header to insert for SSL offload
>
> Hi Eric,
>
> Great to see a fellow Portlander on the list.
>
> I'm not aware if there's a standard header, but SSL_OFFLOAD seems 
> reasonable. The real trick is if the application knows to look for 
> that, or any other header, in order to trigger link creation with 
> https://. Some web apps, like Microsoft OWA, don't, and instead use a 
> registry setting: http://support.microsoft.com/kb/327800
>
> What load balancer are you using? Some will intercept the HTTP content 
> going back to the client and re-write URLs with HTTPS.
>
> Tony
>
> On Apr 27, 2009, at 4:22 PM, Rosenberry, Eric wrote:
>
>
>
> We are having a problem with a new application being written in house 
> whereby the application generates all redirects with http:// links 
> instead of https:// links. The application has no idea that it is 
> being front-ended by a SSL offloading load balancer.
>
> The solution I find out on the Internet is to have the load balancer 
> insert some kind of header into each request to tell the application 
> to generate all redirects with https:// instead of http.
>
> My question to the list: Is there a standard header recommended for 
> this purpose, or does everyone make up their own? I see several 
> references to this online. I believe Citrix recommends “SSL_OFFLOAD”.
>
> Any suggestions?
>
> Thanks!
>
> -Eric
>
> _______________________________________________________________
> Eric Rosenberry
> Sr. Network Engineer | Chief Bit Plumber
> Direct +1. 503.943.6763 | Mobile: +1.503.348.3625 | Fax: +1.503.224.1581
>
>
> iovation
> 111 SW Fifth Avenue
> Suite 3200
> Portland, OR 97204
> www.iovation.com <http://www.iovation.com/>
>
> The information contained in this email message may be privileged, 
> confidential and protected from disclosure. If you are not the 
> intended recipient, any dissemination, distribution or copying is 
> strictly prohibited. If you think that you have received this email 
> message in error, please notify the sender by reply email and delete 
> the message and any attachments.
>
> _______________________________________________
> lb-l mailing list
> [email protected] <mailto:[email protected]>
> http://vegan.net/mailman/listinfo/lb-l
> Searchable Archive: http://vegan.net/lb/archive
> http://lbdigest.com Load Balancing Digest
> http://lbwiki.com Load Balancing Wiki
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> lb-l mailing list
> [email protected]
> http://vegan.net/mailman/listinfo/lb-l
> Searchable Archive: http://vegan.net/lb/archive
> http://lbdigest.com Load Balancing Digest
> http://lbwiki.com Load Balancing Wiki
>   

_______________________________________________
lb-l mailing list
[email protected]
http://vegan.net/mailman/listinfo/lb-l
Searchable Archive: http://vegan.net/lb/archive
http://lbdigest.com Load Balancing Digest
http://lbwiki.com Load Balancing Wiki