I'm looking for a way to tell IIS 6 that even though a request came by http, it can be considered as https.
The HTTPS is managed before the request arrive on applications server. With Tomcat, we use the RemoteIpValve with the http header X-Forwarded-Proto to tell Tomcat if the connection is secure, or not.
Is there a way to do it in IIS? Could an Isapi Filter be a solution?
Thank you for all hints.
[EDIT :] To be more precise : The architecture is as follow, for our tomcat :
USER | LoadBalancer (KeepAlived) | | | '- Apache (SSL) | HaProxy | | Tomcat
When a user makes an https Request on the tomcat, the request passes through the apache where the https is decoded(Apache adds the
X-Forwarded-Proto: https header). Then the request is redirected toward Tomcat through HaProxy(Http LoadBalancer).
I hope it is a little more clear.
PS: Please excuse my english, I don't practice it enough.