Redirection method, apparatus, and system

A redirection method, comprising:

• sending, by a terminal, a first Transport Layer Security (TLS) handshake packet to a broadband remote access server (BRAS), wherein the first TLS handshake packet carries a flag and an identifier of the terminal, and the flag is used to indicate that the terminal is capable of performing redirection according to a uniform resource locator (URL);
• receiving, by the terminal, a URL of a destination server and a certificate of the destination server that are sent by the BRAS, wherein the destination server is a server that redirection is destined for;
• determining, by the terminal, whether the URL of the destination server matches the certificate of the destination server;
• and
• outputting, by the terminal, first prompt information if the URL of the destination server matches the certificate of the destination server, wherein the first prompt information is used to prompt that access is to be redirected, and the access is access of the terminal to a requested server.

A broadband remote access server (BRAS), comprising:

• a memory storing instructions;
• and
• a processor coupled to the memory, wherein the instructions, when executed by the processor, cause the processor to:
• receive a first Transport Layer Security (TLS) handshake packet sent by a terminal, wherein the first TLS handshake packet carries a flag and an identifier of the terminal, and the flag is used to indicate that the terminal is capable of performing redirection according to a uniform resource locator (URL);
• obtain a URL of a destination server and a certificate of the destination server according to the identifier of the terminal after it is determined that the first TLS handshake packet carries the flag, wherein the destination server is a server that redirection is destined for;
• and
• send the URL of the destination server and the certificate of the destination server to the terminal.