Skip to main content

Identify the client protocol with X-Forwarded-Proto

The X-Forwarded-Proto header identifies the protocol (HTTP or HTTPS) that a client used to connect to a CDN edge server.

Orange's CDN edge servers include X-Forwarded-Proto on every origin request. The value is http or https.

If a client supplies X-Forwarded-Proto, the edge server overwrites it with the actual client-to-CDN protocol instead of appending another value. Origin applications can trust the CDB-provided value when the origin accepts requests only from Orange's CDN; direct origin requests can contain a spoofed header.

Origin or application logic can read the header to:

  • Redirect HTTP clients to HTTPS
  • Serve different content based on the request protocol