Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I can host a dynamic website through Amazon CloudFront because they have CNAME Wildcard Support. However, some pages of my Site use HTTPS. Amazon have some documentation about how to associate your SSL certificate with a CloudFront distribution but the pricing shows that it costs $600 per month, too much for me.

My question is... is it possible to configure CloudFront so HTTP requests are served from CloudFront but HTTPS requests are ignored by CloudFront and passed directly to the origin (in my case, a Elastic Load Balancer which can decrypt SSL at no extra cost)?

share|improve this question
up vote 11 down vote accepted

As of March 2014, Amazon CloudFront supports SNI, at no additional cost, see details here.

This will allow you to use your ssl certificate on CloudFront, without paying $600 monthly.

Please note that SNI is not supported by (extremely) old browsers (pre-IE7, pre-Chrome6, pre-FF 2), see details in link above.

share|improve this answer

[Note: This answer was correct up until March 2014]

No, this is not possible with CloudFront. The user will hit the mismatched certificate before CloudFront processes the request because of the natures of DNS and SSL. You might consider CloudFlare's SSL offering.

share|improve this answer

Not to my knowledge - Cloudfront are still charging $600/m, however there are services out there that offer cheaper SSL integration.

At CDNify (where I work), we've just made the decision to offer this for free.

share|improve this answer
You might want to consider disclaiming that you work for CDNify. If your primary purpose here is to tout your services, please don't. – ceejayoz May 6 '14 at 14:58
Sorry if I wasn't clear - I've edited my comment. – Jamie May 6 '14 at 15:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.