HTTP到HTTPS重定向-Nginx与Node Express

Question

I want to redirect the HTTP traffic to the secure HTTPS version of my website. I am running NodeJS Express on an nginx server. What would be the best way to do the redirect: using nginx or Express? Is there any significant difference between the two options, like performance for example?

Answer 1

It all depends on how you do it but the performance difference will likely be insignificant. What I usually do is when nginx handles the SSL keys and certificates then I also let it take care of the redirects. That way the Node app doesn't even need to know about the HTTP - all it cares is serving the requests coming from the reverse proxy.

Example nginx config:

    server {
            listen 80;
            server_name example.com;
            add_header Strict-Transport-Security "max-age=3600";
            root /www/example.com/html;
            index index.html index.htm;

            location / {
                    return 302 https://example.com$request_uri;
            }
    }

Keep in mind that you will need to temporarily turn off the redirect to HTTPS if you're using Let's Encrypt but only for the time of certification renewal - something worth noting because it can be hard to diagnose when your certification renewal fails.