Skip to main content
NotMine
NotMine
Explorer III
March 6, 2015
Solved

Server load balancing - redirect HTTP to HTTPS

  • March 6, 2015
  • 5 replies
  • 13195 views

Hi guys,

 

I've set up a 100D to load balance HTTPS traffic between two real servers. So, I have one virtual server of type HTTPS, SSL offloading Client<->FortiGate and two real servers. But the problem is that users have to type in https://www.webserveraddress.dom every time they want to access my website.

 

What I would like is to automatically redirect their HTTP requests (i.e. http://www.webserveraddress.dom) to HTTPS (i.e. https://www.webserveraddress.dom).

 

Is there any way to do this on FGT-100D?

 

Thanks!

    Best answer by Dinesh_FTNT

    HI,

    Your requirement can be achieved with Fortiweb but with Fortigate HTTP to HTTPS redirection is not possible.

    5 replies

    garyxd
    garyxd
    New Member
    March 7, 2015

    I think you need a FortiWeb for this case.  Or other dedicated load balancer (F5, A10, Kemp, etc.) / WAF that supports SSL offloading.

    NotMine
    NotMineAuthor
    Explorer III
    March 7, 2015

    Hi,

    FortiGate-100D does support SSL Offloading, and I've created a virtual server of HTTPS type. This works great. The certificate is being presented to the client by the FGT (SSL offloading is Client<->FortiGate), and the connections are being load balanced between two real servers.

     

    But, it works only if the client types in https://www.serveraddres.lab in the address bar. If they go to the http://www.serveraddress.lab, they get nothing.

     

    What I would like is that FortiGate automatically redirects all clients from http to https. It is a simple thing to do in TMG.

    Dinesh_FTNT
    Staff
    Dinesh_FTNTAnswer
    Staff
    March 9, 2015

    HI,

    Your requirement can be achieved with Fortiweb but with Fortigate HTTP to HTTPS redirection is not possible.

    NotMine
    NotMineAuthor
    Explorer III
    March 9, 2015

    OK, thank you... It's a shame, really. It's only a minor feature, and I don't think it would be hard to implement, too. Especially when you consider that FGT is perfectly capable to automatically redirect administrative users from HTTP to HTTPS, when they try to login.

     

    Thanks anyway, it's a correct answer - even though I don't like it. :)

     

    DW_FTNT
    Staff
    DW_FTNT
    Staff
    August 12, 2019

    HTTP to HTTPS redirect was added to 6.2.1 Code   you can terminate 443 on the fortigate or just pass 443 all the way to the server. This link shows how to terminate/offload 443 on the fortigate https://docs.fortinet.com...ect-for-load-balancing here is a link to offloading https://help.fortinet.com...db-ssl-tls-offload.htm     if you want to just pass 443 to the server and not terminate the session on the fortigate edit the vip "virtual-server-https" --->  set server-type tcp

     

    you can also redirect other ports like 8080  using http edit "virtual-server-http"     set extport 80 to    set extport 8080     be sure to use proxy mode

    Markus
    Markus
    New Member
    August 28, 2019

    I know, very old post, but good news...

    Starting with FortiOS 6.2.1, you can configure a virtual server with HTTP to HTTPS redirect enabled

    https://docs.fortinet.com...ect-for-load-balancing

     

    [Edit]

    sorry, allready posted :)

    Terms & ConditionsAccessibility statement