X-Forwarded-Proto header identifies the protocol (HTTP or HTTPS) that a client used to connect to a CDN edge server.
Gcore CDN edge servers include X-Forwarded-Proto on every origin request. The value is http or https.
If a client supplies X-Forwarded-Proto, the edge server overwrites it with the actual client-to-CDN protocol instead of appending another value. Origin applications can trust the Gcore-provided value when the origin accepts requests only from Gcore CDN; direct origin requests can contain a spoofed header.
Origin or application logic can read the header to:
- Redirect HTTP clients to HTTPS
- Serve different content based on the request protocol