Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to make nginx redirect based on the value of a header?

I'm hosting a website behind a Cloudflare proxy, which means that all requests to my server are over port 80, even though Cloudflare handles HTTP (port 80) and HTTPS (port 443) traffic.

To distinguish between the two, Cloudflare includes an X-Forwarded-Proto header which is set to "http" or "https" based on the user's connection.

I would like to redirect every request with an X-Forwarded-Proto: http header to the SSL version of my site. How can I achieve this with an nginx configuration?

like image 749
Kevin Burke Avatar asked Oct 06 '14 19:10

Kevin Burke


People also ask

Does NGINX pass headers?

Passing Request HeadersBy default, NGINX redefines two header fields in proxied requests, “Host” and “Connection”, and eliminates the header fields whose values are empty strings. “Host” is set to the $proxy_host variable, and “Connection” is set to close .


2 Answers

The simplest way to do this is with an if directive. If there is a better way, please let me know, as people say the if directive is inefficient. Nginx converts dashes to underscores in headers, so X-Forwarded-Proto becomes $http_x_forwarded_proto.

server {     listen 80;     server_name example.com; # Replace this with your own hostname     if ($http_x_forwarded_proto = "http") {         return 301 https://example.com$request_uri;     }      # Rest of configuration goes here...  } 
like image 139
Kevin Burke Avatar answered Oct 07 '22 15:10

Kevin Burke


Try using map directive: http://nginx.org/en/docs/http/ngx_http_map_module.html#map

Something like that...

map $http_x_forwarded_proto     $php_backend {     "https"          "https_php_backend named loc";     default        "default_php_backend named loc"; } server{     location / {          proxy_pass http://$php_backend;     } } 

This code is abstract, but you can try tht way...

like image 32
user989840 Avatar answered Oct 07 '22 15:10

user989840