[PATCH] set $https for use behind SSL-stripping load-balancer

Maxim Dounin mdounin at mdounin.ru
Tue Mar 3 12:01:01 UTC 2015


On Tue, Mar 03, 2015 at 02:49:44PM +1000, Alex Wilson wrote:

> > On 28 Jan 2015, at 2:35 pm, Alex Wilson <alex at cooperi.net> wrote:
> > 
> > Currently when using nginx behind an SSL-stripping load-balancer, there is no way to control the scheme used when generating directory redirects….
> > 
> Has anyone got any feedback for me on this patch by any chance? Is this something that’s just not wanted, or is my code terrible, or…?
> Sorry to be a nag, I was hoping to at least get a “no, go away” :)

While the problem you are trying to solve is clear enough, I can't 
say I like the patch suggested.  If we are going to address this, 
I would prefer something in line with server_name_in_redirect 
(may be something like "relative_redirects" will do the trick, 
it's allowed as per RFC7231 now) and/or realip module.

Maxim Dounin

More information about the nginx-devel mailing list