xf2 behind cloudfront, board canonicalization

  • Thread starter Thread starter mazdas247
  • Start date Start date

mazdas247

Guest
Member
I'm running xf2 latest behind aws, cloudfront, which offloads SSL and does caching, etc etc. With board canonicalization on, it seems xf2 ignores that "CloudFront-Forwarded-Proto" is https and considers the client is on the wrong proto, so it 301 redirects to SSL. Even though the client is already on SSL. Ran tcpdump, the CloudFront-Forwarded-Proto header is definitely there and is delivered to httpd.

Just wondering if this is normal. Worst case I'll just use https origin, but that's...

Read more
 
Top