• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Best way to redirect HTTP to HTTPS

Scheduled Pinned Locked Moved Cache/Proxy
3 Posts 2 Posters 532 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • O
    orionis
    last edited by Feb 4, 2021, 3:43 PM

    Hello

    Actually i have un network with a pfsense
    i use HAProxy for reverse proxy, in my DMZ i have more than physical server

    one HASSIO for my domotic -----> https:/home.mydomain.local
    one Cloud / Mail for e ---- https://cloud.mydomain.local.
    https:// mail.mydomain.local

    To go on SSL url, i configure a frontend to redirect all http to https.
    but in my apache config files i have redirect http to https,
    it's redundant No.

    What's the best way or the standart lets do Haproxy or my apache conf ?

    C 1 Reply Last reply Mar 7, 2021, 11:00 AM Reply Quote 0
    • C
      Clarence
      last edited by Clarence Feb 6, 2021, 10:21 AM Feb 6, 2021, 10:20 AM

      How clients from the internet communicate with the reverse proxy frontends and how they in turn communicate with the backends are two separate things.

      Seeing as your reverse proxy is the "point-of-entry" to your local network from the outside world I would definitely leave the http→https redirect in HAProxy.

      I am not clued up about Apache but as far as I understand you can decide if you want HAProxy to use http or https to talk with the it.... that's totally up to you if you want that additional redirect.

      I configured my HAProxy to communicate over http with almost all of my backends because I want the fastest possible speed inside my local network and I let the https shared frontend take care of the SSL encryption.

      1 Reply Last reply Reply Quote 0
      • C
        Clarence @orionis
        last edited by Mar 7, 2021, 11:00 AM

        @orionis Any feedback?

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received