Question
Altius Link, Inc.
JP
Last activity: 27 Jan 2023 0:02 EST
Settings on the Pega Platform When Using SSL Termination
Our system uses SSL termination.
Currently, when we try to access the Pega Application on the server through the load balancer, we get a timeout error. (https://xxxxx.com/prweb/)
However, if we connect directly to the server without going through the load balancer, we can access the Pega Application. (http://nn.nn.nn.nn/prweb/)
We haven't changed any settings on the Pega Application since we made this configuration, but do we need to change any settings such as DSS?
***Edited by Moderator Marije to add Capability tags***
Updated: 13 Oct 2022 5:37 EDT
LTIMindtree
SA
Hi,
You don't need to add any DSS Settings to access the Application URL's. Did you See SSL Secure option in the browser while accessing the URL? Do you see any error like "Not Secured / Un-secured" while opening the URL's?
Check on the SSL Certificate which prepared for the Application. Sometimes, SSL Certificates will be binded over with 2 URL's under single SSL certificate will cause the issue. You're also required to cross verify if the Round-Robin Option / Algorithm is enabled or not in the load balancer configurations.
For more info, Please attach the screenshot while you're accessing the URL.
KDDI Agile Development Center Corporation
JP
@HirokazuA , long time no see.
We encountered a similar problem too, and solved it, so we share it with you.
When offloading SSL using Load-Barancer or Reverse-Proxy, you need to add "X-Forwarded-Proto" header to http request at Load-Barancer or Reverse-Proxy, according to the following document.
Deployment behind a reverse proxy | Pega
This will allow Pega to know if the web browser is accessing over HTTPS or HTTP, which hostname, what port. Thank you.
--
Daigo Muto
KDDI