{"id":6248,"date":"2016-09-10T13:43:42","date_gmt":"2016-09-10T05:43:42","guid":{"rendered":"http:\/\/rmohan.com\/?p=6248"},"modified":"2016-09-10T13:43:42","modified_gmt":"2016-09-10T05:43:42","slug":"how-to-force-https-behind-aws-elb","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=6248","title":{"rendered":"How to force HTTPS behind AWS ELB"},"content":{"rendered":"

How to force HTTPS behind AWS ELB<\/h1>\n
\n
\n
\n
\n
\n
\n
\n
\n

In the most common configurations, when running your web app behind Nginx or Apache, your https:\/\/ request will get redirected to http:\/\/. Sometimes, you may want to rewrite all HTTP requests to HTTPS.<\/p>\n

The Amazon Elastic Load Balancer (ELB) supports a HTTP header called X-FORWARDED-PROTO<\/strong>. All the HTTPS requests going through the ELB will have the value of X-FORWARDED-PROTO<\/strong> equal to \u201cHTTPS<\/strong>\u201c. For the HTTP requests, you can force HTTPS by adding a simple rewrite rule, as follows:<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n

1. Nginx<\/h1>\n
\n
\n

In your nginx site config file check if the value of X_FORWARDED_PROTO is https, if not, rewrite it:<\/p>\n

server {\r\n  listen 80;\r\n  ....\r\n  location \/ {\r\n    if ($http_x_forwarded_proto != 'https') {\r\n      rewrite ^ https:\/\/$host$request_uri? permanent;\r\n    } \r\n  ....\r\n  }\r\n}<\/pre>\n<\/div>\n<\/div>\n
2. Apache<\/h1>\n
\n
\n
Same\u00a0goes\u00a0for\u00a0Apache,\u00a0add\u00a0this\u00a0rewrite\u00a0rule\u00a0to\u00a0your\u00a0site\u2019s\u00a0config\u00a0file:<\/p>\n
<VirtualHost *:80>\r\n...\r\nRewriteEngine On\r\nRewriteCond %{HTTP:X-Forwarded-Proto} !https\r\nRewriteRule ^.*$ https:\/\/%{SERVER_NAME}%{REQUEST_URI}\r\n...\r\n<\/VirtualHost><\/pre>\n<\/div>\n<\/div>\n
3. IIS (Windows)<\/h1>\n
\n
\n
Install\u00a0IIS\u00a0Url-Rewrite\u00a0module,\u00a0using\u00a0the\u00a0configuration\u00a0GUI\u00a0add\u00a0these\u00a0settings<\/p>\n
Install IIS Url-Rewrite module, using the configuration GUI add these settings\r\n\r\n<rewrite xdt:Transform=\"Insert\">\r\n<rules>\r\n<rule name=\"HTTPS rewrite behind ELB rule\" stopProcessing=\"true\">\r\n<match url=\"^(.*)$\" ignoreCase=\"false\" \/>\r\n<conditions>\r\n<add input=\"{HTTP_X_FORWARDED_PROTO}\" pattern=\"^http$\" ignoreCase=\"false\" \/>\r\n<\/conditions>\r\n<action type=\"Redirect\" redirectType=\"Found\" url=\"https:\/\/{SERVER_NAME}{URL}\" \/>\r\n<\/rule>\r\n<\/rules>\r\n<\/rewrite><\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
How to force HTTPS behind AWS ELB <\/p>\n
In the most common configurations, when running your web app behind Nginx or Apache, your https:\/\/ request will get redirected to http:\/\/. Sometimes, you may want to rewrite all HTTP requests to HTTPS.<\/p>\n
The Amazon Elastic Load Balancer (ELB) supports a HTTP header called X-FORWARDED-PROTO. All the HTTPS […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6248"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6248"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6248\/revisions"}],"predecessor-version":[{"id":6249,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6248\/revisions\/6249"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}