Hébergement web, cloud et solutions personnalisées
If you need your customers to log in in order to access products, services or other information, then you’ll need to set up a membership site. Membership sites come in many different forms. They are used by video and music streaming services, banks, providers of online courses and retailers. Their main function is to section …
Hello!
For those of you who depend on Varnish to offer robust caching and scaling potential to your web stack, hearing about Google’s prioritization (albeit arguably small, for now) of sites that force SSL may cause pause in how to implement.
Varnish currently doesn’t have the ability to handle SSL certificates and encrypt requests as such. It may never actually have this ability because its focus is to cache content and it does a very good job I might add.
So if Varnish can’t handle the SSL traffic directly, how would you go about implementing this with Nginx?
Well, nginx has the ability to proxy traffic. This is one of the many reasons why some admins choose to pair Varnish with Nginx. Nginx can do reverse proxying and header manipulation out of the box without custom modules or configuration. Combine that with the lightweight production tested scalability of Nginx over Apache and the reasons are simple. We’re not interested in that debate here, just a simple implementation.
With Nginx, you will need to add an SSL listener to handle the ssl traffic. You then assign your certificate. The actual traffic is then proxied to the (already set up) non-https listener (varnish).
server {
listen x.x.x.x:443 ssl;
server_name yoursite.com www.yoursite.com;
ssl_certificate /etc/nginx/ssl/yoursite.com.crt;
ssl_certificate_key /etc/nginx/ssl/yoursite.com.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
if ($ host !~* ^www.) {
rewrite ^(.*)$ https://www.$ host$ 1 permanent;
}
location / {
# Pass the request on to Varnish.
proxy_pass http://127.0.0.1:80;
# Pass some headers to the downstream server, so it can identify the host.
proxy_set_header Host $ host;
proxy_set_header X-Real-IP $ remote_addr;
proxy_set_header X-Forwarded-For $ proxy_add_x_forwarded_for;
# Tell any web apps like Drupal that the session is HTTPS.
proxy_set_header X-Forwarded-Proto https;
proxy_redirect off;
}
}
The one thing to note before going further is the second last line of the configuration. That is important because it allows you to avoid an infinite redirect loop of a request proxying to varnish, varnish redirecting non-ssl to ssl and back to nginx for a proxy. You’ll notice that pretty quickly because your site will ultimately go down 🙁
What nginx is doing is defining a custom HTTP header and assigning a value of “https” to it :
proxy_set_header X-Forwarded-Proto https;
So the rest of the nginx configuration can remain the same (the configuration that varnish ultimately forwards requests in order to cache).
What you’re going to need in your varnish configuration is a minor adjustment :
if (req.http.X-Forwarded-Proto !~ "(?i)https") {
set req.http.x-Redir-Url = "https://www.yoursite.com" + req.url;
error 750 req.http.x-Redir-Url;
}
What the above snippet is doing is simply checking if the header “X-Forwarded-Proto” (that nginx just set) exists and if the value equals (case insensitive) to “https”. If that is not present or matches , it sets a redirect to force the SSL connection which is handled by the nginx ssl proxy configuration above. Its also important to note that we are not just doing a clean break redirect, we are still appending the originating request URI in order to make it a smooth transition and potentially not break any previously ranked links/urls.
The last thing to note is the error 750 handler that handles the redirect in varnish :
sub vcl_error {
if (obj.status == 750) {
set obj.http.Location = obj.response;
set obj.status = 302;
return(deliver);
}
}
You can see that were using a 302 temporary redirect instead of a permanent 301 redirect. This is your decision though browsers tend to be stubborn in their own internal caching of 301 redirects so 302 is good for testing.
After restarting varnish and nginx you should be able to quickly confirm that no non-SSL traffic is allowed anymore. You can not only enjoy the (marginal) SEO “bump” but you are also contributing to the HTTPS Everywhere movement which is an important cause!
The post Force SSL for your site with Varnish and Nginx appeared first on Managed WordPress Hosting | Managed VPS Hosting | Stack Star.
Managed WordPress Hosting | Managed VPS Hosting | Stack Star
Hello!
For those of you who depend on Varnish to offer robust caching and scaling potential to your web stack, hearing about Google’s prioritization (albeit arguably small, for now) of sites that force SSL may cause pause in how to implement.
Varnish currently doesn’t have the ability to handle SSL certificates and encrypt requests as such. It may never actually have this ability because its focus is to cache content and it does a very good job I might add.
So if Varnish can’t handle the SSL traffic directly, how would you go about implementing this with Nginx?
Well, nginx has the ability to proxy traffic. This is one of the many reasons why some admins choose to pair Varnish with Nginx. Nginx can do reverse proxying and header manipulation out of the box without custom modules or configuration. Combine that with the lightweight production tested scalability of Nginx over Apache and the reasons are simple. We’re not interested in that debate here, just a simple implementation.
With Nginx, you will need to add an SSL listener to handle the ssl traffic. You then assign your certificate. The actual traffic is then proxied to the (already set up) non-https listener (varnish).
server {
listen x.x.x.x:443 ssl;
server_name yoursite.com www.yoursite.com;
ssl_certificate /etc/nginx/ssl/yoursite.com.crt;
ssl_certificate_key /etc/nginx/ssl/yoursite.com.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
if ($ host !~* ^www.) {
rewrite ^(.*)$ https://www.$ host$ 1 permanent;
}
location / {
# Pass the request on to Varnish.
proxy_pass http://127.0.0.1:80;
# Pass some headers to the downstream server, so it can identify the host.
proxy_set_header Host $ host;
proxy_set_header X-Real-IP $ remote_addr;
proxy_set_header X-Forwarded-For $ proxy_add_x_forwarded_for;
# Tell any web apps like Drupal that the session is HTTPS.
proxy_set_header X-Forwarded-Proto https;
proxy_redirect off;
}
}
The one thing to note before going further is the second last line of the configuration. That is important because it allows you to avoid an infinite redirect loop of a request proxying to varnish, varnish redirecting non-ssl to ssl and back to nginx for a proxy. You’ll notice that pretty quickly because your site will ultimately go down 🙁
What nginx is doing is defining a custom HTTP header and assigning a value of “https” to it :
proxy_set_header X-Forwarded-Proto https;
So the rest of the nginx configuration can remain the same (the configuration that varnish ultimately forwards requests in order to cache).
What you’re going to need in your varnish configuration is a minor adjustment :
if (req.http.X-Forwarded-Proto !~ "(?i)https") {
set req.http.x-Redir-Url = "https://www.yoursite.com" + req.url;
error 750 req.http.x-Redir-Url;
}
What the above snippet is doing is simply checking if the header “X-Forwarded-Proto” (that nginx just set) exists and if the value equals (case insensitive) to “https”. If that is not present or matches , it sets a redirect to force the SSL connection which is handled by the nginx ssl proxy configuration above. Its also important to note that we are not just doing a clean break redirect, we are still appending the originating request URI in order to make it a smooth transition and potentially not break any previously ranked links/urls.
The last thing to note is the error 750 handler that handles the redirect in varnish :
sub vcl_error {
if (obj.status == 750) {
set obj.http.Location = obj.response;
set obj.status = 302;
return(deliver);
}
}
You can see that were using a 302 temporary redirect instead of a permanent 301 redirect. This is your decision though browsers tend to be stubborn in their own internal caching of 301 redirects so 302 is good for testing.
After restarting varnish and nginx you should be able to quickly confirm that no non-SSL traffic is allowed anymore. You can not only enjoy the (marginal) SEO “bump” but you are also contributing to the HTTPS Everywhere movement which is an important cause!
The post Force SSL for your site with Varnish and Nginx appeared first on Managed WordPress Hosting | Managed VPS Hosting | Stack Star.
Managed WordPress Hosting | Managed VPS Hosting | Stack Star
It is not your fault you got confused. You probably already know that choosing the wrong website hosting plan can be detrimental to your business.
Here is a typical question we hear often from our website design clients:
I need a site where i can upload 37 episodes of an anime show to host on my website, it needs to be able to upload in good quality and be free to both me and my site members. These videos need to be in 1 PART AND 1 PART ONLY, no splitting videos, that is 100% out of the question. Not that i am to lazy, but its for my website, and i want to give my members the best of quality they can get.
I would love to do that, but my web host offers me only 750mb of storage space.
Before you proceed with any web hosting, ask yourself these questions:
Now let us review the 10 important features to identify in an excellent web hosting. An outstanding web host:
Many experienced web developers use Hostgator. If need a quality hosting plan, website experts usually recommend going with Hostgator because they are the best best domain host in the world today.
The Hostgator reviews will tell you that HG has an amazingly long, 45 days money back guarantee so you have ample time to test them out. They are rated A+ by Better Business Bureau which shows their commitment to customer satisfaction. You also do not have to pay for the first month. You can just try their fully functional hosting service – you pay only $ 0.01 (you need to use the exclusive coupon). Do you know any other hosting company that believe in themselves so much they can give you that kind of assurance? Anybody can grab an account from Hostgator for almost FREE.
Click the coupon below try Hostgator cPanel hosting for almost free. If you already know that Hostgator is what you want, you can even save 25% off the normal price.
No web hosting service is perfect. If you compare Hostgator with other hosts, they do not offer some things these companies offer:
If you are unsure if HG can meet your needs, or you have specific question about something, try the Live Chat at HG. They are friendly, fast and knowledgeable. They are available for sales, billing or even technical support for 24/7 at no extra charge.
Hostgator is having a 20% sale right now, but you can use the above coupon code for bigger savings.
It is not your fault you got confused. You probably already know that choosing the wrong website hosting plan can be detrimental to your business.
Here is a common question we hear often from our website design clients:
I am looking for one that will:
-Allow me to upload an unlimited amount of videos
-Have a time limit that is very high, if not, then no limit.
-Have a file size limit of at least 100 MB
-Allow me to upload videos that have copyrighted music
-Have good quality playback
-Allow me embed videos (optional)I know that is asking for a lot but does anyone have any ideas?
Do not make the mistake of thinking unlimited bandwidth and diskspace is all you need in a hosting service. There are a lot more to ask yourself before you decide on which web hosting is the best for you.
Use this list to check for what you truly need:
Now let us review the 10 important factors to identify in an excellent web hosting. An outstanding web host:
Many experienced web developers use Hostgator. If need a quality hosting plan, website experts usually recommend going with Hostgator because they are the best best domain host in the world today.
The Hostgator reviews will tell you that HG has an amazingly long, 45 days money back guarantee so you have ample time to test them out. They are rated A+ by Better Business Bureau which shows their commitment to customer satisfaction. You also do not have to pay for the first month. You can just try their fully functional hosting service – you pay only $ 0.01 (you need to use the exclusive coupon). Do you know any other hosting company that believe in themselves so much they can give you that kind of assurance? Anybody can grab an account from Hostgator for almost FREE.
Click the coupon below try Hostgator cPanel hosting for almost free. If you already know that Hostgator is what you want, you can even save 25% off the normal price.
No web hosting service is perfect. If you compare Hostgator with other hosts, they do not offer some things these companies offer:
If you are unsure if HG can meet your needs, or you have specific question about something, try the Live Chat at HG. They are friendly, fast and knowledgeable. They are available for sales, billing or even technical support for 24/7 at no extra charge.
Hostgator is having a 20% sale right now, but you can use the above coupon code for bigger savings.
It is not your fault you got confused. You probably already know that choosing the wrong website hosting plan can be detrimental to your business.
Here is a common question we hear often from our website design clients:
I’m searching for the fastest video uploading site like YouTube and play it back with high quality and faster than YouTube.
Do not make the mistake of thinking unlimited bandwidth and diskspace is all you need in a hosting service. There are a lot more to ask yourself before you decide on which web hosting is the best for you.
Use this list to check for what you truly need:
Now let us review the 10 important factors to identify in an excellent web hosting. An outstanding web host:
Many experienced web developers use Hostgator. If need a quality hosting plan, website experts usually recommend going with Hostgator because they are the best best domain host in the world today.
The Hostgator reviews will tell you that HG has an amazingly long, 45 days money back guarantee so you have ample time to test them out. They are rated A+ by Better Business Bureau which shows their commitment to customer satisfaction. You also do not have to pay for the first month. You can just try their fully functional hosting service – you pay only $ 0.01 (you need to use the exclusive coupon). Do you know any other hosting company that believe in themselves so much they can give you that kind of assurance? Anybody can grab an account from Hostgator for almost FREE.
Click the coupon below try Hostgator cPanel hosting for almost free. If you already know that Hostgator is what you want, you can even save 25% off the normal price.
No web hosting service is perfect. If you compare Hostgator with other hosts, they do not offer some things these companies offer:
If you are unsure if HG can meet your needs, or you have specific question about something, try the Live Chat at HG. They are friendly, fast and knowledgeable. They are available for sales, billing or even technical support for 24/7 at no extra charge.
Hostgator is having a 20% sale right now, but you can use the above coupon code for bigger savings.
