Networking Forums

Networking Forums > Computer Networking > Linux Networking > route outbound https traffic on separate nic

Reply
Thread Tools Display Modes

route outbound https traffic on separate nic

 
 
andrew_m_katz@yahoo.com
Guest
Posts: n/a

 
      04-22-2005, 03:56 PM
I have an application server which sits behind a Cisco CSS (11000).
The CSS has been configured to route any traffic on port 443 to one one
of the Apache instances on one of the application servers. I did this
by using a "url" value in the content rule of "//*". I had to use an
*everything* content rule url b/c the traffic is encrypted and the CSS
cannot discern any part of the encrypted URL.

This setup seems to work fine for *inbound* traffic. The problem i
have is when our application needs to connect to remote services over
HTTPS (e.g., port 443). The CSS sees this *outbound* traffic and
re-routes it to one of the *internal* application servers.

My question is this:

Can i add another NIC to our application servers and setup a separate
network segment for *outbound* HTTPS traffic? I was thinking that i
could put another NIC on both application servers AND our Cisco PIX
firewall. The topology would look something like the following:

---------
| Pix |
---------
192.168.1.1 | |192.168.3.1
| |-----------|
| |
|-------| |
| CSS | (192.168.3 switch)
|-------| | |
| | |
| | |
(192.168.1 switch) | |
| | | |
| | | | [ outbound HTTPS traffic ]
|--------| |--------| | |
| app1 | | app2 | | |
|--------| |--------| | |
| | | |
| |--------- |
|----------------------|

I'm not sure how to configure the linux application servers to route
any HTTPS traffic on the 192.168.3 network segment.

Any help is greatly appreciated!

Andy

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Tunneling server for http and https traffic magnus.moraberg@gmail.com Linux Networking 3 05-22-2009 04:04 PM
50Mbps outbound traffic from Port 80 Chris Windows Networking 2 08-10-2006 08:55 PM
Redirect outbound traffic with IPTABLEs TravisT Linux Networking 5 05-02-2006 02:32 PM
How to separate NICS for SQL traffic, "Search" server traffic Marlon Brown Windows Networking 0 10-19-2005 06:08 PM
Logging outbound traffic on a W3K router... Pradeep Windows Networking 1 11-02-2004 02:01 AM



1 2 3 4 5 6 7 8 9 10 11