The present application provides a redirection method, apparatus, and system, to increase a redirection success rate. In the method, a broadband remote access server (BRAS) receives a first Transport Layer Security (TLS) handshake packet sent by a terminal, where the first TLS handshake packet carries a flag and an identifier of the terminal, and the flag is used to indicate that the terminal is capable of performing redirection according to a uniform resource locator (URL); after determining that the first TLS handshake packet carries the flag, the BRAS obtains a URL of a destination server and a certificate of the destination server according to the identifier of the terminal, where the destination server is a server that redirection is destined for; and the BRAS sends the URL of the destination server and the certificate of the destination server to the terminal.