This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Log in to ask a question

F5 Load Balancer in front of devportal (Nginx based: 4.17.01)

Posted on 04-08-2017 04:47 PM
Not applicable
Reply posted on --/--/---- --:-- AM

Seeing Mixed Content errors upon accessing devportal via the F5 loadbalancer. Error:

Mixed Content: The page at “https://dev.devportal.apigee.com/api” was loaded over HTTPS, but requested an insure image “http://dev.deveportal.apigee.com/sites/default/files/home.png”. This content should also be served over HTTPS.
0 1 588
Topic Labels
0 Likes
1 REPLY 1

Posted on --/--/---- --:-- AM
Not applicable
Reply posted on --/--/---- --:-- AM

Mixed content occurs when initial HTML is loaded over a secure HTTPS connection, but other resources (such as images, videos, stylesheets, scripts) are loaded over an insecure HTTP connection. This can be solved by having the LB insert header "X-Forwarded-Proto" with value "HTTPS". This has been discussed in detail in the section: "Identifying HTTPS traffic in your application" on https://www.lullabot.com/articles/setting-up-ssl-offloading-termination-on-an-f5-bigip-load-balance...

For Apache load balancer, add the following setting in the virtualhost configuration:

 RequestHeader set X_FORWARDED_PROTO 'https'
0 Likes