NetScaler - Responder policy fails for SSL Cache Redirection vserver

NetScaler - Responder policy fails for SSL Cache Redirection vserver

book

Article ID: CTX235623

calendar_today

Updated On:

Description

Cache redirection works with responder policies for HTTP but when trying to HTTPS the responder fails.
HTTP 404 message may be displayed,  "This page cannot be displayed" instead of expected resource
 

Resolution


Cache Redirection HTTPS Responder Policies do not work. This is a limitation of using the Netscaler as a Forward Proxy and isn't currently a supported option within the scope of Forward Proxy.

The Netscaler cannot see the request because in HTTPS mode Web browsers establish a direct tunnel to the destination server using CONNECT method. The prevents the Netscaler from seeing the GET request and being able to process a Responder, so it never returns any data to the browser.

You might not even see any hits on Responder policy since NetScaler fails to read CONNECT method..

CLI Command,
nsconmsg -d current | egrep -i responder

Problem Cause

Cache Redirection does not support HTTPS responder policies