I would like to run several Tornado instances with nginx as a load balancer and static file server. Since both are to be running on the same machine (or atleast the same, private network) I would like nginx to handle HTTPS connections and have it communicate with the tornado instances without encryption. I found how to configure nginx to do that and how to set an X-Scheme header, allowing me to check if the connection was via HTTP or HTTPS.


What I would like is to also get information about the cipher used, so that I can display a notification to the user if their browser does not support PFS yet. Is there a way to do this?

1 Answer 1


http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables first variable is $ssl_cipher

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.