Jump to content
Welcome to our new Citrix community!

NetScaler URL transform


Paul Balan

Recommended Posts

We have SF VIP that is being redirected http to https via the following method: https://www.carlstalhood.com/ssl-virtual-servers-netscaler-11-1/#redirectlbmethod

We also want to be able to forward shortnames to an FQDN and there are basically 2 shortnames that we have to take care of. Policy looks like this: HTTP.REQ.URL.EQ("site1")||HTTP.REQ.URL.EQ("site2")

Profile looks like this(trying it only on site1 right now):

Request URL From:

site1

Request URL TO:

https://site1.blah.com

REquest URL from:

Http://site1

REquest URL to:

https://site1.blah.com

I have another profile called site1_ssl which does the following:

REquest URL from:

Https://site1

REquest URL to:

https://site1.blah.com

 

As a test I changed the Request URLs to a dummy site like sports.yahoo.com and when I go to site1/ (with my hosts file pointed to the SF vip) it just throws a cert error (since site1 by itself isnt in the cert) without doing a redirect/transform

The responder (http to https) and transform policies are applied to the SF http VIP. Am I doing something wrong? Does the transform not work like this?

Link to comment
Share on other sites

the trasform/redirect  happens after the SSL part. So if you get an error on SSL cert transform/redirect will not take place.

If you use rewrite  an URL , then your servers will have to be able to respond to request comming to the rewriten url (https://site1.blah.com).

if you use the method with SSL redirectlbmethod, then all request will be redirected to SSL.

so rules like this don't make sense anymore:

 

Request URL From:

site1

Request URL TO:

https://site1.blah.com

 

I would use the responder way of doing things.

 

 

Also i don't think is is a good iddea to use responder and also that lbmethod.

 

 

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...