Re: php $_server variable when using haproxy & stunnel

On Monday 24 of October 2011 20:48:33 Amol wrote:
> Hi, i was trying to check on my php variables using the following code on
> both my servers
>
> <?php
> if($_SERVER['HTTPS'])
> echo 'https';
> else
> echo 'Not Https';
> echo "<BR>";
> $port = $_SERVER['SERVER_PORT'];
> echo $port;
> echo "<BR>";
>
> $protocol = $_SERVER["SERVER_PROTOCOL"];
> echo $protocol;
> ?>
>
> my output would be:
> Not Https
> 80
> HTTP/1.1
>
> my stunnel config is : ---
>
> [https-load]
> cert=/etc/stunnel/ssl/group-wildcard.pem
> key = /etc/stunnel/ssl/name.key
> accept=100.00.10.10:443
> connect=11.10.51.231:8000
> TIMEOUTclose=0
> xforwardedfor=yes
>
>
> and haproxy config is : ---
>
> listen webcluster1 11.10.51.231:8000
> mode http
> stats enable
> balance roundrobin
> cookie BALANCEID insert indirect nocache
> option httpclose
> option forwardfor except 127.0.0.1
> option httpchk HEAD /check.txt HTTP/1.0
> #http-check disable-on-404
> server load1-app 11.10.42.17:80 cookie A check
> server load2-app 11.10.55.90:80 cookie B check
>
>
> How can i get my $_server variable to be 'https"? and is my connection
> secure as of this arrangement?

Between client and 100.00.10.10:443 => YES; between 100.00.10.10 and 11.10.51.231 => NO.

If you want to have SERVER_PROTOCOL set to 'https' you should add this to your config:

reqidel ^Server-Protocol:
reqadd Server-Protocol:\ https if src 127.0.0.1

Regards, Brane Received on 2011/10/24 22:58