We all know that when we visit a website and see a green box in the browser address bar, it means the website supports HTTPS encrypted communication, proving that the connection between you and the website is encrypted. Why is HTTPS access more secure? In fact, HTTP faces the problem of eavesdropping or sniffing during access - attackers on network routes can peek at the content you transmit. HTTPS uses three methods: symmetric encryption + asymmetric encryption + CA authentication, making the transmission process more secure and reliable.

But if some users access via HTTP, how can we automatically redirect HTTP requests to HTTPS access? The following configuration process can achieve this.

Just configure the ALB listener

1. Redirect ALB port 80 to ALB port 443.
2. Forward ALB port 443 to client custom port
3. Configure CNAME resolution between ALB DNS domain name and domain registrar

Step 1: Upload your own domain certificate. You can upload via console or command line.

Command line upload reference: https://docs.aws.amazon.com/zh_cn/IAM/latest/UserGuide/id_credentials_server-certs.html

Step 2: Add ALB listener 80 redirect to 443.

You can use the redirect action to redirect client requests from one URL to another.

Step 3: Correctly configure the target group port and add EC2 instances

Step 4: Add HTTPS 443 forwarding to backend target group specified port.

Step 5: Access domain via HTTP, it will automatically redirect to HTTPS access