we are successfully tunnelling to an IIS server and can get to Hello World and a blank IIS on Port 80. We have verified the yaml file and all seems fine with a catchall to 404. However when adding in a service to localhost:8080 we are getting a 400. Even though browsing locally works.
We are only trying this as we have a number of websites on that server that are using hostheaders to identity them, however we are not sure that Cloudflare respects that?
So entering service: https://website.whackyservice.com also gets a 400.
I have 3 questions
Does Cloudflare Zero Trust respect hostheaders or do we need to create localhost bindings on different ports?
If it does respect hostheaders how to do you write that into the configuration file?
Our sites also redirect for the logon page so when you browse website.whackyservice.com it actually sends you to website.whackyservice.com/logon should this matter, or do we need to write this into the config file as well?
If your application is designed well and uses relative redirects, or redirects based on the host header, you’re fine. The only time there would be an issue is if the application was configured to think it was at 127.0.0.1:8080 and tried to redirect the user to that.
You probably also want to use 127.0.0.1:8080 over localhost:8080, as that could mean either IPv4 127.0.0.1 or IPv6 ::1, and your server may not be bound on both.
thanks I’ll give that a go but it isn’t entirely clear how you use the httphostheader in the documentation. As we are testing at the moment the hostheader we are accessing externally is different to the hostheader internally. Do you just add it under originrequest as below? So hostheader specifies the host header and originservername can specify the cert?