Scale up as you grow — whether you're running one virtual machine or ten thousand.

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.

I have a Django 4.2 app running on App Platform. When inspecting request headers in my app I can see that they include HTTP_X_FORWARDED_PROTO: https. That’s good and implies that I should be able to add a SECURE_PROXY_SSL_HEADER to my security settings. However, the Django documentation for that setting includes the following warning:
Modifying this setting can compromise your site’s security. Ensure you fully understand your setup before changing it.
Make sure ALL of the following are true before setting this…:
- Your Django app is behind a proxy.
- Your proxy strips the
X-Forwarded-Protoheader from all incoming requests, even when it contains a comma-separated list of protocols. In other words, if end users include that header in their requests, the proxy will discard it.- Your proxy sets the
X-Forwarded-Protoheader and sends it to Django, but only for requests that originally come in via HTTPS.
So, I would like to know if App Platform meets all three of those conditions.
2528527458a540fba5c38cc921bb27
c21c0b00bb284130a0d0cd3b7bdab4
IsaacMvd
Leon Junior
hashembarret@gmail.com
JetForMe
24608ead89f046a8abab394f968f2c
Philipp Mayerhofer
enews
Brian Magnosi
jairunet