Problem with HttpContext.Request.Url.Scheme and load balancer with

microsoft.public.dotnet.framework.aspnet.webcontrols

25 Jun 2009 4:46 PM

David Brockus

Hello,

I have an IIS 6.0 server behind a Cisco CSS 11506 with SSL offload.

Clients are required to use https. So there is https between the clients
and the load balancer and http between the load balancer the IIS server.

There is a piece of code on the IIS server that is using
HttpContext.Request.Url.Scheme. It is returning http (instead of https). I
am assuming that this is because of the http connection between the load
balancer and the IIS server. Can someone verify this assumption?

Thanks,
David

25 Jun 2009 5:13 PM

Patrice

Looks expected, it is accessed using the http scheme, so it is http not
https...

Try perhaps :

http://www.windowsecurity.com/articles/SSL-Acceleration-Offloading-Security-Implications.html

and in particular the "What are the Security Implications of Offloading SSL
?" section...

--
Patrice

"David Brockus" <dbrockus@community.nospam> a écrit dans le message de

groupe de discussion : A7CD8323-0453-44B9-A9F2-3FEA69A2D***@microsoft.com...
Show quoteHide quote

> Hello,
>
> I have an IIS 6.0 server behind a Cisco CSS 11506 with SSL offload.
>
> Clients are required to use https. So there is https between the clients
> and the load balancer and http between the load balancer the IIS server.
>
> There is a piece of code on the IIS server that is using
> HttpContext.Request.Url.Scheme. It is returning http (instead of https).
> I
> am assuming that this is because of the http connection between the load
> balancer and the IIS server. Can someone verify this assumption?
>
> Thanks,
> David