[Web-SIG] Reverse Proxy & HTTPS

[Graham Dumpleton]

Using nginx as front end to Apache/mod_wsgi as an example:

On nginx side you would use:

  proxy_set_header X-Url-Scheme $scheme;

and on Apache/mod_wsgi side, with Django 1.0 as an example, in WSGI
script file we would have:

  import os, sys
  sys.path.append('/usr/local/django')

  os.environ['DJANGO_SETTINGS_MODULE'] = 'mysite.settings'

  import django.core.handlers.wsgi

  _application = django.core.handlers.wsgi.WSGIHandler()

  def application(environ, start_response):
    environ['wsgi.url_scheme'] = environ.get('HTTP_X_URL_SCHEME', 'http')
    return _application(environ, start_response)

Is the equivalent on IIS side as others have mentioned that you need.

Graham

2009/4/7 Paweł Stradomski <pstradomski at gmail.com>:
> W liście Randy Syring z dnia poniedziałek, 6 kwietnia 2009:
>
>> I would like my application to have control over the HTTPS<->HTTP
>> redirects and would rather not force that logic into the forward facing
>> web server if at all possible.  That just seems like an extra
>> configuration step that wouldn't necessarily be needed if I could figure
>> out how to pass SSL status from the forward facing web server to the
>> backend proxy (i.e. CherryPy and my app).
>>
>> So, do you (or anyone else) know of a good way to to this?  Or, does
>> everyone just assume that it is all or nothing for SSL when you are
>> proxying to a backend?
>>
> Check with IIS manual, it should be possible to set some nonstandard header
> when the connection goes through SSL, and then check this header in your
> application. Maybe that header is already there - write a simple controller
> that prints all the headers from the request and check how it looks with and
> without SSL (but verify with the IIS manual anyway).
>
> --
> Paweł Stradomski
> _______________________________________________
> Web-SIG mailing list
> Web-SIG at python.org
> Web SIG: http://www.python.org/sigs/web-sig
> Unsubscribe: http://mail.python.org/mailman/options/web-sig/graham.dumpleton%40gmail.com
>