Reverse Proxy (SSL Offload) with ZoneMinder

[jor]

Bear with me as I'm sort of a Linux noob, but here goes...

I'm trying to use NetScaler to offload SSL and front-end my ZoneMinder server. So, SSL from the client to the load balancer, HTTP from the load balancer back to the webserver. I have a plain old HTTP vserver which is working fine (HTTP to the load balancer, HTTP to the webserver). When I create an SSL virtual server and apply my cert, I can browse to the Apache default page at https://myserver.mydomain.com no problem, but when I add the /zm, I'm redirected to http://myserver.mydomain.com/zm. All of the results I've found point me back to changing the "ZM_BASE_URL" in index.php to use relative URLs (which makes 100% sense and would explain why the default Apache page loads fine without redirecting to HTTP), but it appears this is already set correctly in ZoneMinder 1.29.

Any ideas or experiences are appreciated.

Here's one (of many) posts addressing the ZM_BASE_URL: viewtopic.php?t=22427

[jor]

Turns out this can be resolved in NetScaler by enabled SSL Redirect on the load balancing vserver. It basically rewrites the http:// to https:// on redirect responses from the webserver. I am skeptical that anyone else is using NetScaler with their ZM servers, but if so, the command needed to enable the SSL Redirect feature is as follows:

Code: Select all

set ssl vserver VSERVERNAME -sslRedirect ENABLED