Comments (6)
I'm not sure, this is the first time I've seen this. It looks as if you're accepting HTTPS requests DIRECTLY to your Django process, as opposed to having some sort of webserver / proxy intercept the SSL before passing the request to Django.
If that's what you're doing, you should really be using a web server of some sort in front of your Django app:
- gunicorn
- nginx
- something
from django-sslify.
Hi Randall,
Thank you for the quick response!
I read upon nginx and set it up but am not running it. I ran through a tutorial on uWSGI and nginx but wasn’t able to link the two together. This is the link I followed for the tutorial : http://uwsgi-docs.readthedocs.org/en/latest/tutorials/Django_and_nginx.html http://uwsgi-docs.readthedocs.org/en/latest/tutorials/Django_and_nginx.html
Is this going to put me on the right track? What would you recommend between the two (gunicorn vs nginx) ?
On Mar 27, 2015, at 11:26 AM, Randall Degges [email protected] wrote:
I'm not sure, this is the first time I've seen this. It looks as if you're accepting HTTPS requests DIRECTLY to your Django process, as opposed to having some sort of webserver / proxy intercept the SSL before passing the request to Django.
If that's what you're doing, you should really be using a web server of some sort in front of your Django app:
gunicorn
nginx
something
—
Reply to this email directly or view it on GitHub #26 (comment).
from django-sslify.
I'm really only familiar with gunicorn, which is what I use. There are benefits / drawbacks to all of the different web servers, but in reality it doesn't matter so long as the webeserver itself is what's terminating the SSL connection.
I can't really speak to whether or not that tutorial is gonna help you though, sorry :(
You might be better off trying stackoverflow or something like that for this sort of help, as I'm sorta useless ><
from django-sslify.
Its no problem.
Thanks for your feedback, I greatly appreciate it!
On Mar 27, 2015, at 11:34 AM, Randall Degges [email protected] wrote:
I'm really only familiar with gunicorn, which is what I use. There are benefits / drawbacks to all of the different web servers, but in reality it doesn't matter so long as the webeserver itself is what's terminating the SSL connection.
I can't really speak to whether or not that tutorial is gonna help you though, sorry :(
You might be better off trying stackoverflow or something like that for this sort of help, as I'm sorta useless ><
—
Reply to this email directly or view it on GitHub #26 (comment).
from django-sslify.
Hi randall,
Can you explain why django server should not be handling direct https connections ? Or some link
from django-sslify.
It's not so much that the Django server shouldn't be terminating the SSL -- it's moreso a matter of speed and efficiency. EG: An actual webserver is going to be MUCH faster at handling the crypto operations, and this will also spare your Django process itself the pain of doing crypto on top of every connection.
AFAIK, this is the 'best practice' for scripting languages like Python where you're stuck on a single processor.
from django-sslify.
Related Issues (18)
- SECURE_PROXY_SSL_HEADER setting for Heroku HOT 3
- Specify Python versions supported HOT 3
- Disable sslify for localhost HOT 2
- Allow Specifying SSL Port HOT 1
- Allow using SSL in DEBUG Mode HOT 1
- django-sslify Usage with Cloudflare HOT 4
- When debug turned off with nginx receive Infinite 301 Error. HOT 7
- DEBUG default toggle, Django messes with it for tests HOT 1
- Fix Django 1.8 Tests
- All files in my static folder are returning 404 when sslify is enabled. HOT 2
- Code 400 returned on enabling ssl port HOT 1
- Obsolete for Django >= 1.8? HOT 3
- Thanks for making this! HOT 1
- New release HOT 12
- Test errors HOT 2
- Can't run server, getting an error `SSLifyMiddleware() takes no arguments` HOT 3
- PyPI 0.2.1 release for SSLIFY_DISABLE feature HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from django-sslify.