You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Andreas Hartke (JIRA)" <ji...@apache.org> on 2011/01/10 21:57:48 UTC

[jira] Created: (TS-633) SSL Termination reverse_mapping

SSL Termination reverse_mapping
-------------------------------

                 Key: TS-633
                 URL: https://issues.apache.org/jira/browse/TS-633
             Project: Traffic Server
          Issue Type: Bug
          Components: Remap API, SSL
    Affects Versions: 2.1.0
            Reporter: Andreas Hartke


We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.

Here our configuration:
map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/

The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 

redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] [Updated] (TS-633) SSL Termination reverse_mapping

Posted by "Carlos Aguado Sánchez (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carlos Aguado Sánchez updated TS-633:
-------------------------------------

    Attachment: UrlRewrite.cc.patch

This patch fixes the issue with reverse_map and different URL schemes.

> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>             Fix For: 2.1.8
>
>         Attachments: UrlRewrite.cc.patch
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] Commented: (TS-633) SSL Termination reverse_mapping

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13008294#comment-13008294 ] 

Leif Hedstrom commented on TS-633:
----------------------------------

Any chance you tried this yet? v2.1.6 has the fixes for reverse and redirect map, so really curious if this is still a problem.

> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>             Fix For: 2.1.8
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (TS-633) SSL Termination reverse_mapping

Posted by "Carlos Aguado Sánchez (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13008979#comment-13008979 ] 

Carlos Aguado Sánchez commented on TS-633:
------------------------------------------

Running into the same reverse_map issue, I tried with v2.1.7 and the problem persists. The FQDN is properly translated but not the scheme.

> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>             Fix For: 2.1.8
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Issue Comment Edited] (TS-633) SSL Termination reverse_mapping

Posted by "Carlos Aguado Sánchez (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13009353#comment-13009353 ] 

Carlos Aguado Sánchez edited comment on TS-633 at 3/21/11 8:26 PM:
-------------------------------------------------------------------

Problem found: attached is the patch that fixes the issue with reverse_map and different URL schemes.

      was (Author: caguado):
    This patch fixes the issue with reverse_map and different URL schemes.
  
> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>             Fix For: 2.1.8
>
>         Attachments: UrlRewrite.cc.patch
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] Commented: (TS-633) SSL Termination reverse_mapping

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13002027#comment-13002027 ] 

Leif Hedstrom commented on TS-633:
----------------------------------

Can you test the latest trunk, and see what works (and what doesn't). Bear in mind that all redirect type maps always have lower priority than a "map" rule. Meaning, if a request matches a map rule, that will take effect, even if a matching redirect or redirect_temporary rule comes before this map rule.

> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>             Fix For: 2.1.7
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

-- 
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Updated: (TS-633) SSL Termination reverse_mapping

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-633:
-----------------------------

    Fix Version/s: 2.1.7

> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>             Fix For: 2.1.7
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

-- 
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Assigned] (TS-633) SSL Termination reverse_mapping

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom reassigned TS-633:
--------------------------------

    Assignee: Leif Hedstrom

> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>            Assignee: Leif Hedstrom
>             Fix For: 2.1.8
>
>         Attachments: UrlRewrite.cc.patch
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] Updated: (TS-633) SSL Termination reverse_mapping

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-633?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-633:
-----------------------------

    Fix Version/s:     (was: 2.1.7)
                   2.1.8

> SSL Termination reverse_mapping
> -------------------------------
>
>                 Key: TS-633
>                 URL: https://issues.apache.org/jira/browse/TS-633
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Remap API, SSL
>    Affects Versions: 2.1.0
>            Reporter: Andreas Hartke
>             Fix For: 2.1.8
>
>
> We configure reverse_proxy with SSL Termination and have problems with respones from the origin server containing http-adresses. If the origin server sends reponses with addresses the reverse_mapped adresses from trafficserver contain http instead of https.
> Here our configuration:
> map https://asp2.geomagic.de/path/     http://origin_server:8080/path/
> reverse_map http://origin_server:8080/path/     https://asp2.geomagic.de/path/
> redirect_temporary https://asp2.geomagic.de/path https://asp2.geomagic.de/path/
> The redirection from https to https works fine but a redirect_temporary from a http-adress to a https-address maps to a http-address instead of a https-address. 
> redirect_temporary http://asp2.geomagic.de/gasline https://asp2.geomagic.de/gasline/

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira