1. Home
  2. Balancer
  3. Passing the scheme through SSL termination
  1. Home
  2. Accelerator
  3. Passing the scheme through SSL termination
  1. Home
  2. Misc
  3. Passing the scheme through SSL termination

Passing the scheme through SSL termination

Often times when you are terminating SSL connections at the Accelerator or the Balancer, you need to know whether the request was initiated via an HTTP or HTTPS connection on your web server.

Note: you’ll be editing advanced options that might cause errors should they be altered incorrectly, so please ensure that you know what you are doing before changing this, or use the defaults which are fine for almost all cases.

On the Accelerator

For the Accelerator, you can pass the “schema” (that is, whether it was HTTP or HTTPS) by creating or editing a Cache Profile and adding Custom Header.

Option 1: Adding a Profile (If You Didn’t Have One)

Caching profiles are templates for configuring caching on a server or location basis. These allow you to specify when a certain cache will be used–for example, for what status codes.

Navigate to:

Accelerator > Caching > Cache Profiles

And click on Add Profile tab.

Give a Name to your Profile click the Add New Profile button.

Finally, under Options pane, find the Custom Headers [Advanced] field and enter:

X-Forwarded-Proto $scheme

Note: this will require a restart.

Option 2: Modifying a Profile

If you already have a Cache Profile, you can edit it very easily.

Navigate to:

Accelerator > Caching > Cache Profiles

Next, under the View Profiles tab, go to the Cache Profiles pane, select your profile (e.g. Default) and click on the Settings button next to it.

Finally, under the Options pane, go to the Custom Headers [Advanced] field and enter:

X-Forwarded-Proto $scheme

Note: this will require a restart.

On the Balancer

For the Balancer, on the other hand, you can get the schema by requesting an additional header on your SSL group; whether that is an actual Group, a Frontend, or a Backend.

Navigate accordingly to:

Balancer > Group Management

or

Balancer > Frontend Management

or

Balancer > Backend Management

Click on the Edit button for the Group, Frontend or Backend you want to pass the schema from.

Go under:

HTTP Options sub-tab > Header Modification pane > Request Add field

And enter:

X-Forwarded-Proto:\ SSL

This will insert that header into requests for the SSL group, letting you know if they came in via HTTPS.

Updated on November 30, 2018


Was this article helpful?

Related Articles