> On Apr 1, 2019, at 2:39 AM, Alexander Rabenstein 
> <[email protected]> wrote:
> 
> Hi, 
>  
> I am trying to figure out if its technical possible with Traffic Server to 
> achieve the following:
>  
> Client requests http://domainx.internal <http://domainx.internal/>/index.html 
> using trafficserver in forward proxy mode.
> Trafficserver serves the requested page, the pages contains <img > links to 
> https://domainy.internal/xyz <https://domainy.internal/xyz>
> Clients requests https://domainy.internal/xyz <https://domainy.internal/xyz>
> Trafficserver remaps to http://domainz.internal/ <http://domainz.internal/> 
> and aborts the ssl tunnel from the client..
>  
> I got the configuration so far working as the remaping of the hostname is 
> done, but the client first sends a CONNECT request, and ts is forwind this to 
> the origin server on port 80, which the origin can’t handle


Pretty sure what you are asking to do is not possible, at least I can’t think 
of a way. If your client is setup to do forward proxy for HTTPS, then it will 
do CONNECT. To avoid the mapping to port80, you would just need to have either 
an open proxy (not recommended) or a rule like

        map https://domainx.internal <https://domainx.internal/> 
https://domainx.internal <https://domainx.internal/>


Alternatively, if you truly want to change from HTTPS -> HTTP, you would need 
to rewrite the HTML returned for the index.html page. This can be done with a 
transform plugin, but I don’t think we have one that does exactly this.

— Leif

>  
> Gruß,
>  
> Alex
>  
> Alexander Rabenstein – Application Management Retail  - Tel: 455 077

Reply via email to