standardize http->https redirect pattern in virtual-redirect

RESOLVED FIXED

Status

Infrastructure & Operations
WebOps: Other
RESOLVED FIXED
9 months ago
9 months ago

People

(Reporter: atoll, Assigned: atoll)

Tracking

Details

(Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/4512])

(Assignee)

Description

9 months ago
should be able to copy-paste servername/alias only, no other changes, using 301

Updated

9 months ago
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/4512]

Updated

9 months ago
Assignee: server-ops-webops → rsoderberg
(Assignee)

Comment 1

9 months ago
<VirtualHost *:80>
    ServerName xyz
    ServerAlias abc

    RewriteEngine On
    RewriteRule "^/?(.*)" "https://%{HTTP_HOST}/$1" [L,R=308,QSA]
</VirtualHost>
<VirtualHost *:81>
    ServerName xyz
    ServerAlias abc

    ...
</VirtualHost>

308 Permanent tells the browser to maintain whatever HTTP method it was using over http:// so that we can concentrate all intelligence in the HTTPS side, and make the *:80 side a generic redirect. Implemented and deployed in stage, will ship to prod with other changes.
Status: NEW → RESOLVED
Last Resolved: 9 months ago
Resolution: --- → FIXED
(Assignee)

Comment 2

9 months ago
Apache can't load 308 reliably, reduced to R=307 (temp) instead. HSTS will take care of it.
You need to log in before you can comment on or make changes to this bug.