Contents

HTTP redirect commands· 1

display http-redirect statistics· 1

http-redirect https-port 2

http-redirect https-rate-limit 3

http-redirect ssl-server-policy· 3

reset http-redirect statistics· 4

 

HTTP redirect commands

display http-redirect statistics

Use display http-redirect statistics to display packet statistics for HTTP redirect.

Syntax

In standalone mode:

display http-redirect statistics [ slot slot-number ]

In IRF mode:

display http-redirect statistics [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays HTTP redirect packet statistics on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays HTTP redirect packet statistics on all cards. (In IRF mode.)

Examples

# (In standalone mode.) Display HTTP redirect packet statistics for slot 1.

<Sysname> display http-redirect statistics slot 1

Slot 1:

HTTP:

 Received SYN packets                            :1000

 Sent SYN ACK packets                            :1000

 Sent RST packets                                :500

 Redirect node not found events                  :50

 Assembled redirect URL failed times/total times :100/700

HTTPS:

 Received SYN packets                            :1000

 Sent SYN ACK packets                            :1000

 Sent RST packets                                :500

 Redirect node not found events                  :300

 Assembled redirect URL failed times/total times :100/700

 SSL handshake failed times/total times          :0/700

 SSL data interaction failed times/total times   :0/700

Table 1 Command output

Field	Description
HTTP	Packet statistics for HTTP redirect.
Received SYN packets	Number of SYN packets that have been received.
Sent SYN ACK packets	Number of SYN ACK packets that have been sent.
Sent RST packets	Number of RST packets that have been sent.
Redirect node not found events	Number of times that the system failed to find redirect nodes.
Assembled redirect URL failed times/total times	Redirect URL assembly failures and total number of redirect URL assemblies.
HTTPS	Packet statistics for HTTPS redirect.
SSL handshake failed/total times	Number of SSL handshake failures, and the total number of SSL handshakes.
SSL data interaction failed times/total times	Number of SSL data exchange failures, and the total number of SSL data exchanges.

‌

Related commands

reset http-redirect statistics

http-redirect https-port

Use http-redirect https-port to specify the HTTPS redirect listening port number.

Use undo http-redirect https-port to restore the default.

Syntax

http-redirect https-port port-number

undo http-redirect https-port

Default

The HTTPS redirect listening port number is 6654.

Views

System view

Predefined user roles

network-admin

Parameters

port-number: Specifies the TCP port number on which the HTTPS redirect service listens for HTTPS requests. The value range for the port number is 1 to 65535.

Usage guidelines

To avoid service unavailability caused by port conflict, do not specify a TCP port number used by a well-known protocol or used by any other service. To display TCP port numbers that have been used by services, use the display tcp command.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify 8888 as the HTTPS redirect listening port number.

<Sysname> system-view

[Sysname] http-redirect https-port 8888

http-redirect https-rate-limit

Use http-redirect https-rate-limit to set the HTTPS redirect rate limit.

Use undo http-redirect https-rate-limit to restore the default.

Syntax

http-redirect https-rate-limit pps

undo http-redirect https-rate-limit

Default

The default HTTPS redirect rate limit is not set.

Views

System view

Predefined user roles

network-admin

Parameters

pps: Specifies the HTTPS redirect rate limit, in the range of 1 to 65535, in packets per second (pps).

Usage guidelines

Redirecting a large number of HTTPS requests will overwhelm the CPU and affect other services on the device. To resolve this issue, you can limit the rate of HTTPS redirect packets sent to the CPU. When the rate of the HTTP redirect packets exceeds the limit, the device drops the exceeding HTTPS redirect packets.

Setting this limit affects the performances of services that need to redirect HTTPS requests, for example, the user online rate of the authentication service. Set a proper HTTPS redirect rate limit according to the network condition.

Examples

# Set the HTTPS redirect rate limit to 200 bps.

<Sysname> system-view

[Sysname] http-redirect https-rate-limit 200

http-redirect ssl-server-policy

Use http-redirect ssl-server-policy to associate an SSL server policy with the HTTPS redirect service.

Use undo http-redirect ssl-server-policy to restore the default.

Syntax

http-redirect ssl-server-policy policy-name

undo http-redirect ssl-server-policy

Default

No SSL server policy is associated with the HTTPS redirect service. The HTTPS redirect service uses a self-assigned certificate and the default SSL parameters.

Views

System view

Predefined user roles

network-admin

Parameters

policy-name: Specifies an SSL server policy by its name, a case-insensitive string of 1 to 31 characters.

Usage guidelines

HTTPS redirect is unavailable if the associated SSL server policy does not exist. You can first associate a nonexistent SSL server policy with the HTTPS redirect service and then configure the SSL server policy.

If you change the SSL server policy associated with the HTTPS redirect service, the new policy takes effect immediately.

If you perform this task multiple times, the most recent configuration takes effect.

Examples

# Associate SSL server policy policy1 with the HTTPS redirect service.

<Sysname> system-view

[Sysname] http-redirect ssl-server-policy policy1

Related commands

ssl server-policy

reset http-redirect statistics

Use reset http-redirect statistics to reset packet statistics for HTTP redirect.

Syntax

In standalone mode:

reset http-redirect statistics [ slot slot-number ]

In IRF mode:

reset http-redirect statistics [ chassis chassis-number slot slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears HTTP redirect packet statistics on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears HTTP redirect packet statistics on all cards. (In IRF mode.)

Examples

# (In standalone mode.) Clear HTTP redirect packet statistics for slot 1.

<Sysname> reset http-redirect statistics slot 1

Related commands

display http-redirect statistics