Encryption of data in Transit
Assumption: Load Balancer is listening on Port 80,443 on the public side and ORDS standalone is listening on Port 8080,8443 on the private side.
End to End SSL
Use SSL to communicate with ORDS standalone
Ensure Health Check is using Port 8443
Add HSTS response header
Rule Set for adding HSTS response header
Listener on Port 443 with the rule set
Setup another listener on Port 80, rediect traffic to 443
Rule Set for Redirection
Listener on Port 80 with the rule set
Run SSL Labs Test
No comments:
Post a Comment