4 Replies Latest reply on Jun 6, 2017 4:04 PM by psharma_affinion

    Jboss and F5 load balancers

    cboice
    cboice Aug 29, 2013 6:30 PM

      Hi all,

       

      I am in the process of configuring a test environment for a web application using an F5 load balancer and JBoss EAP.  We perform SSL negotiation on the F5, and connect to jboss on the unsecured 8080 public connector on the back end.  This gets us to static content fine, and doesn't cause any problems until we encounter a redirect in the spring framework.  When a redirect occurs, jboss returns the http:// protocol to the loadbalancer which is forwarded to the client breaking the connection.

       

      Here's the connector definition:

      <subsystem xmlns="urn:jboss:domain:web:1.4" default-virtual-server="default-host" native="false">

                  <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http" secure="true"/>

                  <virtual-server name="default-host" enable-welcome-root="false">

                  </virtual-server>

       

       

      So I think I need to find a way to have jboss return connections using https without performing any ssl negotiation.  After doing some searching, I found some posts which mentioned adding secure="true" to the connector, but this didn't solve the problem for me.

       

      Short version:

       

      F5 does ssl negotiation and connects to jboss on unsecure 8080 port internally, jboss returns pages with http:// causing the client browser to redirect and drop the session. 

       

      Thanks,

       

      Charles