在IIS 8.5 HTTPS到HTTPS中的URL重写在网关eroor中结束

我真的可以用专家的帮助

目前我们使用反向代理向外界发布多个http网站,都运行良好。

现在我需要给HTTPS访问一个内部的HTPPS站点。

  • 内部HTTPS站点( https://tobadata.internal.lan )可以从运行iis 8.5和urlrewrite 3.0的反向代理服务器访问,所有的证书都可以,没有错误
  • 外部URL的证书(ess.outside.be)安装在rproxy服务器上
  • 证书绑定到在rproxy服务器上运行的特定Web服务器。

    我已经复制了我通常用于我的HTTP站点的简单基本规则

    <rewrite> <rules> <rule name="ReverseProxyInboundRule1" enabled="true" patternSyntax="Wildcard" stopProcessing="true"> <match url="*" /> <conditions> <add input="{HTTPS}" pattern="On" /> </conditions> <action type="Rewrite" url="https://tobadata.internal.lan/{R:0}" /> </rule> </rules> </rewrite> 

    使用此设置时,出现错误“502 – Web服务器收到无效的响应,同时充当网关或代理服务器”

    我已经启用失败的请求跟踪,捕获502错误,但这不是帮助我,因为它似乎重写规则按预期工作?

    1. GENERAL_REQUEST_START SiteId =“2”,AppPoolId =“ess”,ConnId =“1610612741”,RawConnId =“0”,RequestURL =“https://ess.outside.be:443/”,RequestVerb =“GET”14:36 :04.272
    2. GENERAL_ENDPOINT_INFORMATION RemoteAddress =“77.109.122.130”,RemotePort =“53751”,LocalAddress =“192.168.1.80”,LocalPort =“443”14:36:04.288
    3. GENERAL_REQUEST_HEADERS Headers =“Connection:Keep-Alive Accept:text / html,application / xhtml + xml,image / jxr, / Accept-Encoding:gzip,deflate Accept-Language:nl-BE Host:ess.outside.be User-Agent :Mozilla / 5.0(Windows NT 10.0; WOW64; Trident / 7.0; rv:11.0)像Gecko“14:36:04.288
    4. GENERAL_GET_URL_METADATA PhysicalPath =“”,AccessPerms =“513”14:36:04.288
    5. HANDLER_CHANGED OldHandlerName =“”,NewHandlerName =“StaticFile”,NewHandlerModules =“StaticFileModule,DefaultDocumentModule,DirectoryListingModule”,NewHandlerScriptProcessor =“”,NewHandlerType =“”14:36:04.288
    6. URL_REWRITE_START RequestURL =“/”,范围=“分布式”,types=“入站”14:36:04.288
    7. RULE_EVALUATION_START RuleName =“ReverseProxyInboundRule1”,RequestURL =“”,QueryString =“”,PatternSyntax =“Wildcard”,StopProcessing =“true”,RelativePath =“/”14:36:04.288
    8. PATTERN_MATCH Pattern =“*”,Input =“”,Negate =“false”,Matched =“true”14:36:04.288
    9. CONDITIONS_EVALUATION_START LogicalGrouping =“MatchAll”14:36:04.288
    10. CONDITION_EVALUATION Input =“{HTTPS}”,ExpandedInput =“on”,MatchType =“Pattern”,Pattern =“On”,Negate =“false”,Succeeded =“true”14:36:04.288
    11. CONDITIONS_EVALUATION_END成功=“真”14:36:04.288
    12. REWRITE_ACTIONreplace=“https://tobadata.internal.lan/ {R:0}”,RewriteURL =“https://tobadata.internal.lan/”,AppendQueryString =“true”,LogRewrittenURL =“false”14:36 :04.288
    13. RULE_EVALUATION_END RuleName =“ReverseProxyInboundRule1”,RequestURL =“https://tobadata.internal.lan/”,QueryString =“”,StopProcessing =“true”,Succeeded =“true”14:36:04.288
    14. GENERAL_SET_REQUEST_HEADER HeaderName =“X-Original-URL”,HeaderValue =“/”,Replace =“true”14:36:04.288
    15. URL_CHANGED OldUrl =“/”,NewUrl =“https://tobadata.internal.lan/”14:36:04.288
    16. URL_REWRITE_END RequestURL =“https://tobadata.internal.lan/”14:36:04.288
    17. USER_SET AuthType =“”,UserName =“”,SupportsIsInRole =“true”14:36:04.288
    18. HANDLER_CHANGED OldHandlerName =“StaticFile”,NewHandlerName =“ApplicationRequestRoutingHandler”,NewHandlerModules =“ApplicationRequestRouting”,NewHandlerScriptProcessor =“”,NewHandlerType =“”14:36:04.288
    19. GENERAL_SET_REQUEST_HEADER HeaderName =“Max-Forwards”,HeaderValue =“10”,Replace =“true”14:36:04.288
    20. GENERAL_SET_REQUEST_HEADER HeaderName =“Host”,HeaderValue =“tobadata.internal.lan”,Replace =“true”14:36:04.288
    21. GENERAL_SET_REQUEST_HEADER HeaderName =“X-Forwarded-For”,HeaderValue =“77.109.122.130:53751”,Replace =“true”14:36:04.288
    22. GENERAL_SET_REQUEST_HEADER HeaderName =“X-ARR-SSL”,HeaderValue =“4096 | 256 | C = IL,O = StartCom Ltd.,OU = StartCom证书颁发机构,CN = StartCom Class 2 IV服务器CA | C = BE,S = OV ,L = RN,SN = DM,G = T,CN = ess.outside.be“,Replace =”true“14:36:04.288
    23. GENERAL_SET_REQUEST_HEADER HeaderName =“X-ARR-ClientCert”,HeaderValue =“”,Replace =“true”14:36:04.288
    24. GENERAL_SET_REQUEST_HEADER HeaderName =“X-ARR-LOG-ID”,HeaderValue =“075dbaec-f845-4e32-985d-3761117ba9ad”,Replace =“true”14:36:04.288
    25. GENERAL_SET_REQUEST_HEADER HeaderName =“Connection”,HeaderValue =“”,Replace =“true”14:36:04.288
    26. URL_CHANGED OldUrl =“https://tobadata.internal.lan/”,NewUrl =“/”14:36:04.303
    27. GENERAL_SEND_CUSTOM_ERROR HttpStatus =“502”,HttpSubStatus =“3”,FileNameOrURL =“502.htm”14:36:05.366
    28. GENERAL_SET_RESPONSE_HEADER HeaderName =“Content-Type”,HeaderValue =“text / html”,Replace =“true”14:36:05.381
    29. GENERAL_FLUSH_RESPONSE_START 14:36:05.381
    30. GENERAL_RESPONSE_HEADERS Headers =“Content-Type:text / html Server:Microsoft-IIS / 8.5”14:36:05.381
    31. GENERAL_RESPONSE_ENTITY_BUFFER Buffer =“502 – Web服务器在充当网关或代理服务器时收到无效响应。 MS“,Verdana,无衬线;颜色:#FFF;

    背景色:#555555;}

    内容{margin:0 0 0 2%; position:relative;}

    .content-container {background:#FFF; width:96%; margin-top:8px; padding:10px; position:relative;} – >

    服务器错误

    502 – Web服务器在充当网关或代理服务器时收到无效的响应。

    您正在查找的页面出现问题,无法显示。 当Web服务器(充当网关或代理)联系上游内容服务器时,它从内容服务器收到无效响应。

    “14:36:05.381

    1. GENERAL_FLUSH_RESPONSE_END BytesSent =“1616”,ErrorCode =“操作成功完成(0x0)”14:36:05.381
    2. GENERAL_REQUEST_END BytesSent =“1616”,BytesReceived =“266”,HttpStatus =“502”,HttpSubStatus =“3”14:36:05.381