Node.js + SSL on Heroku. SSL handled by Nginx or Node.js?

Question

I'm currently using

Express 2.x

Node 0.8.x

Do I have to pass

key and cert parameters to express.createServer() to handle SSL by Node.js?

Or SSL is handled by Nginx on Heroku?

Answered succinctly here: http://stackoverflow.com/a/23894573/1882064 — arcseldon, Oct 09 '14 at 15:33

score 3 · Accepted Answer · edited May 23 '17 at 10:09

3

Nope, SSL termination happens at the load balancer, before encrypted traffic reaches your node app:

browser <--HTTPS--> nginx <--HTTP--> node

You can check req.headers['x-forwarded-proto'] === 'https' to see which protocol the request came in with.

edited May 23 '17 at 10:09

Community

answered Jul 11 '12 at 11:51

thatmarvin

So at least I don't have to handle SSL on node.js but just in Heroku command client :) Right? – jwchang Jul 11 '12 at 18:14

1 Answers1