# Wowza behind proxy (http - https) **URL:** \ **Category:** Wowza Streaming Engine\ **Created:** [May 11, 2016, 1:46pm UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251 "2016-05-11T13:46:56Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Erik\_Luys](https://avatars.discourse-cdn.com/v4/letter/e/c6cbf5/32.png) [@Erik\_Luys](https://community.wowza.com/u/Erik_Luys)\ **Post date:** [May 11, 2016, 1:46pm UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/1 "2016-05-11T13:46:56Z")
Hello, Our wowza server sits behind a proxy, the player connects with the proxy through https and the proxy forwards the connection to wowza through http. A playlist item (adaptive bitrate) we use is sample.smil/manifest.mpd, the wowza server generates the mpeg-dash manifest, but the problem is that this generated file contains http links instead of https. Is it possible to tell wowza the original connection is a https connection so the manifest file is generated with https links? Can we use the x-forwarded headers for this? X-Forwarded-For X-Forwarded-Proto X-Forwarded-Port Kind regards, Erik ---
**Author:** ![Paul\_Shields](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/paul_shields/32/390_2.png) [@Paul\_Shields](https://community.wowza.com/u/Paul_Shields)\ **Post date:** [May 17, 2016, 2:14pm UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/2 "2016-05-17T14:14:22Z")
Hi, Currently this isn’t possible but it is something that has been requested a few times and is already registered as a feature request. Unfortunately I can’t say when or if this will be added but you can check [this page](https://www.wowza.com/docs/software-updates) for any announcement of new updates, including release notes. Paul ---
**Author:** ![Silver\_Laadoga1](https://avatars.discourse-cdn.com/v4/letter/s/e79b87/32.png) [@Silver\_Laadoga1](https://community.wowza.com/u/Silver_Laadoga1)\ **Post date:** [September 26, 2017, 7:04pm UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/3 "2017-09-26T19:04:25Z")
How about it now? ---
**Author:** ![Pavel\_Ko\_269\_i\_269\_k](https://avatars.discourse-cdn.com/v4/letter/p/898d66/32.png) [@Pavel\_Ko\_269\_i\_269\_k](https://community.wowza.com/u/Pavel_Ko_269_i_269_k)\ **Post date:** [October 24, 2017, 2:26pm UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/4 "2017-10-24T14:26:18Z")
For us it’s also an issue. We tried to modify manifest on proxy but it was too power intensive. Now we terminate ssl on wowza machnies but we are still looking for better solution. ---
**Author:** ![Andrew\_Ramberg](https://avatars.discourse-cdn.com/v4/letter/a/7c8e57/32.png) [@Andrew\_Ramberg](https://community.wowza.com/u/Andrew_Ramberg)\ **Post date:** [October 24, 2017, 8:28pm UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/5 "2017-10-24T20:28:14Z")
Hello, Thanks for the feedback. I’ve linked this forum to the backlog request so any additional +1 comments will be reviewed by our Product Team. Best regards, Andrew ---
**Author:** ![Samson\_Radu](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@Samson\_Radu](https://community.wowza.com/u/Samson_Radu)\ **Post date:** [November 30, 2017, 9:27am UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/6 "2017-11-30T09:27:16Z")
No updates on this? It’s quite important and looks simple to follow up a header and adjust the manifest file accordingly. ---
**Author:** ![charles\_mackay](https://avatars.discourse-cdn.com/v4/letter/c/ea5d25/32.png) [@charles\_mackay](https://community.wowza.com/u/charles_mackay)\ **Post date:** [February 28, 2020, 2:18am UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/7 "2020-02-28T02:18:55Z")
+1 on this feature. ---
**Author:** ![Library\_IT](https://avatars.discourse-cdn.com/v4/letter/l/fbc32d/32.png) [@Library\_IT](https://community.wowza.com/u/Library_IT)\ **Post date:** [October 22, 2020, 12:41am UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/8 "2020-10-22T00:41:43Z")
It’s an issue here, too. ---
**Author:** ![John\_Snow2](https://avatars.discourse-cdn.com/v4/letter/j/7993a0/32.png) [@John\_Snow2](https://community.wowza.com/u/John_Snow2)\ **Post date:** [June 25, 2021, 7:21am UTC](https://community.wowza.com/t/wowza-behind-proxy-http-https/46251/9 "2021-06-25T07:21:29Z")
You can fix it using nginx. ``` server { listen 443 ssl http2; server_name play.example.com; index index.html index.htm; access_log /var/log/play.example.com/nginx_access.log; error_log /var/log/play.example.com/nginx_error.log error; ssl_certificate /etc/ssl/ansible/play.example.com.pem; ssl_certificate_key /etc/ssl/ansible/play.example.com.key; ssl_dhparam /etc/nginx/dhparam.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers off; ssl_session_timeout 1d; ssl_session_cache shared:MozSSL:10m; # about 40000 sessions ssl_session_tickets off; gzip_proxied any; gzip_types *; location / { proxy_pass http://wowza_rtmp; proxy_set_header Host play.example.com; proxy_set_header Accept-Encoding ""; # Otherwise gzipped content doesn't filter, see - https://stackoverflow.com/a/36274259/5996922 sub_filter "http://play.example.com" "https://play.example.com"; sub_filter_types *; sub_filter_once off; sub_filter_last_modified on; } location = /robots.txt { add_header Content-Type text/plain; return 200 "User-agent: *\nDisallow: /\n"; } } ``` File /etc/nginx/nginx.conf: ``` upstream wowza_rtmp { ip_hash; server 127.0.0.1:1935; } ```