Just curious if SSL terminates at the load balancer, or if it is secure all the way to the application. Either way would change how public URLs are generated, though unless I'm mistaken the scheme would be the only change necessary. Is there any way for the application to detect that it is exposed through SSL?
Does SSL terminate at the load balancer?
Discussions are closed to public comments.
If you need help with AppHarbor please
start a new discussion.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
#1 Posted by tt Support staff on 26 Mar, 2011 11:52 PM
We use SSL termination at the load-balancer, as the rest of the data transmission happens behind our firewall anyway.
You can use the server variable "X-Forwarded-Proto" to decide if the request is mode over HTTP or HTTPS.
I would create an extra extension method rather than modifying the other, as the protocol is related to the current page and not necessarily the page you are creating a URL for.
tt closed this discussion on 26 Mar, 2011 11:52 PM.