I want to run nodejs & socket.io server in google compute engine with https / SSL.
I installed self-signed certificate from https://cloud.google.com/compute/docs/load-balancing/http/ssl-certificates.
Now, How Do I enable nodejs server to use https protocol?
Thanks,
Below is the code, which I used for HTTPS in nodejs,
var app = require('express')();
var https = require('https');
var fs = require('fs');
var PORT = 443;
var options = {
key: fs.readFileSync('XYZ.key'),
cert: fs.readFileSync('ABC.crt')
};
var server = https.createServer(options, app).listen(PORT, function () {
console.log("Express listening on port " + PORT);
});
// Post request.
var req_res = function (req, res) {
console.log("[200] " + req.url);
var fullBody = '';
// Read post data.
req.on('data', function (chunk) {
fullBody += chunk.toString();
if (fullBody.length > 1e6) {
// FLOOD ATTACK OR FAULTY CLIENT, NUKE REQUEST
req.connection.destroy();
}
});
// Send response.
req.on('end', function () {
// empty 200 OK response for now
res.writeHead(200, {
'Content-Type': 'application/json'
});
res.end(JSON.stringify({
'success': true
}));
});
};
// Hello World
app.get('/*', function (req, res) {
res.status(200).send('Hello World...');
});
// Post request to receive notifications.
app.post('/post', req_res);
Regarding google compute engine, you just need to enable 443 port from firewall.
gcloud compute firewall-rules create allow-https --description "https server" --allow tcp:443 --format json
You need a number of things to configure a nodeJS server to use HTTPs. I would suggest Nginx (http://nginx.org/en/docs/http/configuring_https_servers.html) to set up https port 443 connections to terminate at the nginx layer. Then proxy all these connections using the proxy_pass directive in Nginx to your NodeJS server. You could use the upstream directive in Nginx as well.
You would have to do this in a non-https set up as well, since nodeJS should not be listening on the default 80 port as it is a system port, and nodeJS won't allow you to start the process unless you run as sudo (again not recommended).
