Elastic Beanstalk - PHP / Force HTTPS

Question

How do I redirect all traffic while using Amazon Elastic Beanstalk with PHP from http to https? I have setup my Beanstalk to have a https port (all the certificate and stuff has been setup).

Answer 1

Beanstalk sets up their load balancer to send X-Forwarded-Proto headers to your instance(s).

if ($_SERVER['HTTP_X_FORWARDED_PROTO'] !== 'https') {
    // redirect to secure site
    header('Location: https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
}

Though, some will swear by not enabling HTTP at all, due to SSL stripping techniques used in MiTM attacks.

Having said that, you can mitigate SSL stripping by using HSTS .

Answer 2

如果您有单实例弹性beanstalk环境，请尝试以下解决方案： AWS Elasticbeanstalk单实例强制SSL重定向循环