# A10 got a error http 301

**URL:** <https://community.a10networks.com/t/a10-got-a-error-http-301/896>\
**Category:** ADC - Application Delivery\
**Tags:** slb-adc\
**Created:** [April 9, 2025, 3:21am UTC](https://community.a10networks.com/t/a10-got-a-error-http-301/896 "2025-04-09T03:21:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![cvaca](https://avatars.discourse-cdn.com/v4/letter/c/f0a364/32.png) [@cvaca](https://community.a10networks.com/u/cvaca)\
**Post date:** [April 9, 2025, 3:21am UTC](https://community.a10networks.com/t/a10-got-a-error-http-301/896/1 "2025-04-09T03:21:39Z")

</div>

Someone has had this kind of inconvenience

I have the following topology

A10 → SW → SERVERS

I currently have 3 web servers, two of which are working normally, and have practically the same configuration as below.

This is the config for the server that is not working.

!  
slb server server server-error 10.10.10.10  
port 80 tcp  
port 443 tcp  
!  
slb service-group SG-server-error tcp  
member server-error 80  
member server-error 443  
!  
slb virtual-server VIP-SERVER-ERROR 10.20.20. 20  
port 80 http  
source-nat auto  
service-group SG-server-error  
ng-waf  
port 443 https  
source-nat auto  
service-group SG-server-error  
template client-ssl cert-server-error-client  
ng-waf

But when querying, I get a 301 error which means that I have a redirection loop

I have made changes in the A10 configuration, such as creating two different service groups for each port independently, ssl server certificates, aflex so that the redirection is done by the a10, and with all of them I get the same 301 error.

Have you ever had something similar happen?

---

<div class="post-metadata">

**Author:** ![mdunn](https://avatars.discourse-cdn.com/v4/letter/m/87869e/32.png) [@mdunn](https://community.a10networks.com/u/mdunn)\
**Post date:** [April 9, 2025, 3:07pm UTC](https://community.a10networks.com/t/a10-got-a-error-http-301/896/2 "2025-04-09T15:07:55Z")

</div>

Generally, the service-group members will have the same port number. What port do we want the Real Server to receive traffic on? Port 80 or port 443?

The default configuration will perform destination port translation, so with your configuration, as connections are round-robin load balanced, the connections will hit the Real Server on ports 80 and 443.

I suggest you make two service-groups one for port 80 and one for port 443, and bind the appropriate service-groups to the virtual port. If you are configuring SSL Offload, you would only use the port 80 service-group.

slb service-group SG-server-error-80 tcp  
member server-error 80  
slb service-group SG-server-error-443 tcp member server-error 443

---

<div class="post-metadata">

**Author:** ![boteye](https://avatars.discourse-cdn.com/v4/letter/b/8797f3/32.png) [@boteye](https://community.a10networks.com/u/boteye)\
**Post date:** [April 10, 2025, 9:15am UTC](https://community.a10networks.com/t/a10-got-a-error-http-301/896/3 "2025-04-10T09:15:04Z")

</div>

Packet capture on Thunder or the Server will be helpful to understand the traffic flow and cause of the multiple redirects.

Also, can you share the aflex you are using for HTTP → HTTPS redirect.