XenForo xf2 behind cloudfront, board canonicalization

M

mazdas247

Guest
I'm running xf2 latest behind aws, cloudfront, which offloads SSL and does caching, etc etc. With board canonicalization on, it seems xf2 ignores that "CloudFront-Forwarded-Proto" is https and considers the client is on the wrong proto, so it 301 redirects to SSL. Even though the client is already on SSL. Ran tcpdump, the CloudFront-Forwarded-Proto header is definitely there and is delivered to httpd.

Just wondering if this is normal. Worst case I'll just use https origin, but that's...

Read more

Continue reading...