Redirect URL incorrect HTTP Code 302, HTTP Code 307

[Hoang_Hung]

Hi all

We have request flow: End-user ==(HTTPS)==> F5 (Offload SSL) ==(HTTP)==> App Servers

1. user request to LB url:

https://a.b.c.d/ARXAL/AALIndex.jsp

2. App Server return HTTP Code 302, redirect to URL:

http://a.b.c.d:80/ARXAuth/index.jsp?redirectURL=http://a.b.c.d:80/ARXAL/AALIndex.jsp

3.LB return HTTP Code 307, redirect to URL:

https://a.b.c.d/ARXAuth/index.jsp?redirectURL=http://a.b.c.d:80/ARXAL/AALIndex.jsp

4. App Server received request from LB and popup windows with URL:

https://a.b.c.d/ARXAuth/LoginScreen.jsp?redirectURL=http://a.b.c.d:80/ARXAL/AALIndex.jsp&userType=cop

Plz help us.

[Enes_Afsin_Al]

Hi Hoang Hung,

If you configured HTTP Strict Transport Security(HSTS) in load balancer or servers, redirection code is 307. 

If you want 302 redirect, you can remove hsts header and clear hsts settings in browser.

Clean HSTS: https://www.thesslstore.com/blog/clear-hsts-settings-chrome-firefox/

[Hoang_Hung]

Hi eaa

If we use same your solution, we need config on all my people. But it is web sevice provide for user Internet . So we feel that it is not good solution.

Thanks eaa.

Do u know other solution ?