SSLHost deprecated but RedirectRegex only work on Request?

diesmo · February 24, 2023, 1:09pm

Hello,

I am using traefik 2.9.8 in a lab environment with a http backend application.

In the documentation here Traefik Headers Documentation - Traefik

I read : "SSLHost Deprecated in favor of the RedirectRegex middleware."

SSLHost implementation here (line 509), show that it affects the "response" headers :

unrolled/secure/blob/v1/secure.go

package secure

import (
	"context"
	"fmt"
	"net/http"
	"regexp"
	"strings"
)

type secureCtxKey string

const (
	stsHeader               = "Strict-Transport-Security"
	stsSubdomainString      = "; includeSubDomains"
	stsPreloadString        = "; preload"
	frameOptionsHeader      = "X-Frame-Options"
	frameOptionsValue       = "DENY"
	contentTypeHeader       = "X-Content-Type-Options"
	contentTypeValue        = "nosniff"

This file has been truncated. show original

RedirectRegex only works on the request headers, right ?

The typical scenario is :

Traefik listens on HTTPS,
Backend is using HTTP,
Backend sends back a redirect 302 with a Location response header http://example.com

With the SSLHost configuration option being deprecated, there is no way to do the same thing, which is to modify the reponse header to set https://

Maybe i am missing something ?

Thank you.