Specifications

Chapter 4: Configuring the High-Level Network
4-106
Rewriting the protocol name
This feature allows the SSL proxy to rewrite the HTTP protocol name to
HTTPS. For example, a client might send a request to
https://www.sample.com/bar and be initially redirected to
http://www.sample.com/bar/, which is a non-secure channel. If you want
the client request to remain on a secure channel, you can configure the SSL
proxy to rewrite the redirected URI to go to https://www.sample.com/bar/
instead. (Note the addition of the trailing slash.)
Rewriting the port number
In addition to being able to rewrite the protocol name from HTTP to
HTTPS, the SSL proxy can also rewrite the port number of the redirected
request. This happens in the case when the web server and/or SSL proxy are
listening on a non-standard port, for example, when the client request is
initially redirected to http://www.sample.com:8080/bar/. In this case, the
SSL proxy rewrites not only the protocol name but the port number also. If,
however, the SSL proxy is listening on the standard HTTPS port 443, then
the SSL proxy removes the 8080 port number, without replacing it with 443.
Selecting URIs to rewrite
When configuring the SSL proxy to rewrite HTTP redirections, you can
specify whether the proxy should rewrite only those URIs matching the
URI originally requested by the client (minus the trailing slash), or all URIs.
In the latter case, the SSL proxy always rewrites redirected-to URIs, and
rewrites those URIs as if they matched the originally-requested URIs.
Table 4.19 shows examples of how redirections of client requests are
transformed when the SSL proxy is listening on port 443 and the rewrite
feature is enabled.
Table 4.20 shows examples of how redirections of client requests are
transformed when the SSL proxy is listening on port 4443 and the rewrite
feature is enabled.
Original redirection Rewrite of Redirection with SSL Proxy Listening on Port 443
http://www.myweb.com/myapp/ https://www.myweb.com/myapp/
http://www.myweb.com:8080/myapp/ https://www.myweb.com/myapp/
Table 4.19 Examples of rewriting HTTP redirections with SSL proxy listening on port 443
Original redirection Rewrite of Redirection with SSL Proxy Listening on Port 4443
http://www.myweb.com/myapp/ https://www.myweb.com:4443/myapp/
http://www.myweb.com:8080/myapp/ https://www.myweb.com:4443/myapp/
Table 4.20 Examples of rewriting HTTP redirections with SSL proxy listening on port 4443