Skip to content

MINOR: Revise SSL Redirection on default HTTPS port#788

Open
BuJo wants to merge 3 commits intohaproxytech:masterfrom
Contargo:ssl-redirect-default-port
Open

MINOR: Revise SSL Redirection on default HTTPS port#788
BuJo wants to merge 3 commits intohaproxytech:masterfrom
Contargo:ssl-redirect-default-port

Conversation

@BuJo
Copy link
Copy Markdown

@BuJo BuJo commented Feb 24, 2026

  • The default for the controller is to generate redirects to port 8443, as this port can be bound to in a rootless container.
  • Running the container in a Kubernetes setting having a service port mapping to port 443 introduces the need to change this default configuration.
  • Having the default HTTPs port 443 appended to the redirect breaks certain caching behaviours and is thus not ideal.
  • This commit aims to purely switch the scheme from HTTP to HTTPs without changing anything else about the request, the only user visible change being that the :443 in the redirect URL is no longer visible.
  • fixes http -> https default redirect not working by default #642

@Lappihuan
Copy link
Copy Markdown
Contributor

Does this still require to set the ssl-redirect-port to 443?

@BuJo
Copy link
Copy Markdown
Author

BuJo commented Mar 3, 2026

Does this still require to set the ssl-redirect-port to 443?

Yes, the default of 8443 is untouched.

@BuJo BuJo force-pushed the ssl-redirect-default-port branch from 0bf4ab3 to 909369b Compare March 4, 2026 07:42
@BuJo
Copy link
Copy Markdown
Author

BuJo commented Mar 4, 2026

Force pushed due to spelling mistakes in the commit messages (unsure on how to test locally).

@BuJo BuJo force-pushed the ssl-redirect-default-port branch 2 times, most recently from 443cf92 to 5c84c64 Compare March 4, 2026 12:31
BuJo added 3 commits March 6, 2026 16:28
* Split host and SSL redirects conceptually, as they do distinct
  things.  The SSL redirect does not look at the host setting
  when redirecting.
* The default for the controller is to generate redirects to port
  8443, as this port can be bound to in a rootless container.
* Running the container in a Kubernetes setting having a service
  port mapping to port 443 introduces the need to change this
  default configuration.
* Having the default HTTPS port 443 appended to the redirect
  breaks certain caching behaviors and is thus not ideal.
* This commit aims to purely switch the scheme from HTTP to
  HTTPS without changing anything else about the request, the
  only user visible change being that the :443 in the redirect
  URL is no longer visible.
* fixes haproxytech#642
@BuJo BuJo force-pushed the ssl-redirect-default-port branch from 5c84c64 to 24cc55d Compare March 6, 2026 15:29
@stale
Copy link
Copy Markdown

stale bot commented Apr 11, 2026

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Apr 11, 2026
@oktalz oktalz removed the stale label Apr 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

http -> https default redirect not working by default

3 participants