DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.
  • Search Forums
    Advanced Search
Prev
Next
Forums Using DNN Platform Administration and Configuration

URL Rewrite and Reverse Proxy

 2 Replies
 3 Subscribed to this topic
 40 Subscribed to this forum
Sort:
Author
Messages
progmr
New Around Here
Posts: 26
New Around Here
4/1/2025 5:26 AM

Hi,

I've got a DNN 9.12 portal on IIS, server by a reverse proxy (RP). RP send all traffic from non-standard https 8443 port to 80 port (local to IIS). In IIS binding, I added the record for 8443 port

DNN portal receive traffic on 80 port and lose 8443 port info: how to preserve this information?

I do this tests:

- in Site Setting > Site Behavior > Alias, add 8443 port alias (mydns:8443/myportalname) and disable flag automatically add alias. Site doesn't respond

- Enable flag automatically add alias and I see the new alias mydns/myportalname. Site responds on 80 port: it's work, but it doesn't preserv 8443 port

- Use the URL Rewrite module, but at the moment I don't figure out the correct rule and the rule doesn't preserv 8443 port

I try to create a simple helloworld.html page and the port is preserved

Can you give me some hints, please

Will Strohl
Senior Member
Posts: 1607
Senior Member
MVP
MVP
You're an MVP!
New Poster
New Poster
Congrats on posting!
4/1/2025 12:16 PM

Whoa... I haven't tried messing with a reverse proxy in a long time.  The step of adding the port to the PortalAlias is the first step I would've taken too.  

To make sure I know which place(s) need this setting, I'd continue to attempt to test further to see where this needs to be enforced, including in IIS and the web(dot)config.  Also, do your hosting environment supports the IIS URL rewrite module (to support the config changes).  

Daniel Valadas
Veteran Member
Posts: 352
Veteran Member
3 Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
MVP
MVP
You're an MVP!
2 Engaged Reader
Engaged Reader
You are an engaged reader!
Avid Reader
Avid Reader
Avid Reader art thou!
4/1/2025 12:21 PM
Basically we refer to this situation as "SSL Offloading". It is not a fun scenario but reverser proxies should inject a header to help with that. There is not official standard on the name of that header but X-Forwarded-For is a common name. You should find the exact name in the documentation of your reverse proxy. Once you know the name of that header, copy it and paste it in Security->More->SSL Settings. I can't remember in 9.12 if the screen looked like latest but if you see a dropdown for On/Off/Advanced, switch to advanced first, then you will see an input filed "SSL Offload Header Value" and paste the name of your header there.

These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy. 
  2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
  3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  5. No Flaming or Trolling.
  6. No Profanity, Racism, or Prejudice.
  7. Site Moderators have the final word on approving / removing a thread or post or comment.
  8. English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved