Standalone web app using HTTPS

How can I make my standalone web application use https protol?

From our web site I want to create a link to my web application, but by using a secure connection (https).

Thanks for you help.

Standalone doesn’t currently support SSL. For now, you’ll have to run the standalone “behind” a reverse proxy setup using nginx, apache, or some other similar system.

I’ve looked a little but have only found general instructions for how to set this up. For those of us new to Nginx, is there a comprehensive guide for the correct way to set up a reverse proxy that will handle SSL for multiple fastcgi instances of a WE application?

First, if you’re using CGI (not fastcgi - WE doesn’t support that), then you can use SSL with the hosting web server. It’s only the standalone WE apps that require a reverse proxy to handle the SSL.
Second, I don’t know of a guide specifically for WE, but there are many guides out there for configuring nginx to be a reverse proxy and to handle the connection encryption.

Thanks Guys,

I can not use Nginx, my environment is windows based.

olivier vidal posted in another thread:

“With Abyss Webserver (Windows, Reverse Proxy), it works perfectly, without adjustment to make.
I had forgotten that their designer had adapted their webServer to Xojo :-)”

Maybe that’s an option for you?

Nginx runs under Windows also. Abyss is another option, as pointed out above.

As far as i have seen is the Windows version of Nginx just a shadow of the Linux version and i don’t believe it supports reversed proxy and SSL.

It’s true that the Windows version is not as robust as the *nix version, but it does indeed support reverse proxy and SSL. You can read about the limitations at http://nginx.org/en/docs/windows.html

Not having httpS with stand alone web edition apps is a huge bummer for me.

Does anyone have an idea when this is going to be implemented?

Use Abyss for windows. The best tool special for Xojo web apps.

Use a reverse proxy

Standalone web apps should be always run behind something, otherwise you can’t take advantage of all your cores and memory larger than then 32bit limit etc…

A good example for ssl and a ready to use load balancer is linode.com. You can easily setup the node balancer, launch like 7 standalone web apps (each on a different port) and then point the balancer to each of the ports etc…

Can be setup in one hour considering all details and security and will guarantee you way better concurrency than one single standalone web app.

You guy’s see this ?

[quote=60536:@Yosef Coelho]A good example for ssl and a ready to use load balancer is linode.com. You can easily setup the node balancer, launch like 7 standalone web apps (each on a different port) and then point the balancer to each of the ports etc…
[/quote]

Downside of this kind of setup is that your app can’t do session to session communication as easily as with a single instance. Given where 64-bit sits on the roadmap (and where likely to ship), I’d stay away from the load balancers unless your deployment needs them. Lots of very interesting apps run just fine with one instance on modest resources.

you can, the load balancer allows session “styckness”. There are a few ways it provides: ip, cookie or http header of some sort.

I’m currently using cookie, since there are many shared ips out there and didn’t like the header thing.

The nodebalancer handles the cookie and my web apps think they are alone and the client keeps coming back to the same one.

The nodebalancer can also do roundrobin, least connections etc and whenever a webapp fails it will automatically relocate all the users to another one. Sessions will end in this scenario but with a “single” webapp they wouldn’t only end but the user wouldn’t have another option other than wait for relaunching the web app etc.

the node balancer can take up to about 10k https connections, which is fine for now…

btw, I implemented a “clustering” code where a controller keeps all webapps in sync through tcp/ip, so I can have more than one hardware handling the connections from the nodebalancer etc…

Someone can tell me my web app independently (standalone).

Instructions.

[quote=128184:@ELKIN RICARDO MEDINA QUINTERO]Someone can tell me my web app independently (standalone).

Instructions.[/quote]
http://www.xojo.com/blog/en/2014/01/web-standalone-ssl.php

Or

User Guide Book 4: Development, Chapter 1: Deploying Your Applications, Section 4: Web Deployment