Is there a way to track SSL traffic vs. non-SSL traffic?

Setting up remote log streaming will help you better analyze the data. Take a look at our help document to get you started:

http://docs.fastly.com/guides/22951283/21713181

We determine if a request is SSL or not by the presence of a variable http.Fastly-SSL. One option is to create a header and add a condition similar to the following:

  if (req.http.Fastly-SSL) {
     set resp.http.X-Is-SSL = "yes";
  }

Then add this header to your log format.

Another option using remote log streaming would be to create two logging endpoints. Add a condition to one logging endpoint to capture SSL traffic (req.http.Fastly-SSL). Add a condition to the other logging endpoint to capture non-SSL traffic (! req.http.Fastly-SSL).

Alexandre Marlot

June 21, 2017 15:15

Hello Team, I have seen this tips is quite old (3 years). Is it still the best way to know if request is done over http or https ? (check req.http.Fastly-SSL and set up an http header). Thanks, Alex

June 21, 2017 15:17

Hello again, Seems possible to directly use req.http.Fastly-SSL in the log format. Cf : https://community.fastly.com/t/debugging-with-logs/40 Alex

Comments