htaccess非localhost条件语句配置咨询及HTTPS规则优化

Great question! You’re already thinking in the right direction with Apache’s <If>/<Else> directives—they’re perfect for splitting configuration between live and local environments. Let’s break down the cleanest way to implement this, with fixes for a common gotcha in your example.

First, a Quick Correction #

Your example uses http://localhost:8888 in the <If> condition, but the %{HTTP_HOST} variable only contains the hostname and port (e.g., localhost:8888), not the full protocol. Using the full URL would make the condition fail, so we’ll adjust that first.

Apache 2.4+ (Recommended Approach) #

If you’re running Apache 2.4 or newer, <If>/<Else> provides a clean, readable structure. Here’s the complete working config:

# Enable rewrite engine (ensure this isn't duplicated elsewhere in your config)
RewriteEngine On

# Enforce HTTPS ONLY for non-local environments
<If "%{HTTP_HOST} != 'localhost:8888'">
    RewriteCond %{HTTPS} !=on
    # Use R=301 for permanent redirect (best for production) or R=302 for testing
    RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
</If>
<Else>
    # Local environment: No HTTPS redirect needed
    # Add any local-specific rules here (e.g., disabling caching) if you want
</Else>

Bonus: Match All Localhost Variations #

If you use different ports for local development (like 8080 or 80), you can adjust the condition to match any localhost host, regardless of port:

<If "!strstr(%{HTTP_HOST}, 'localhost')">
    # Same HTTPS redirect rules here
</If>

For Apache 2.2 (Legacy Compatibility) #

If you’re stuck on Apache 2.2 (which doesn’t support <If>/<Else>), use RewriteCond to skip the redirect for your local host:

RewriteEngine On

# Skip HTTPS redirect for localhost:8888 (NC makes it case-insensitive)
RewriteCond %{HTTP_HOST} ^localhost:8888$ [NC]
RewriteRule ^ - [L]

# Enforce HTTPS for all other hosts
RewriteCond %{HTTPS} !=on
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]

Key Notes #

• Use R=301 for Production: Permanent redirects (301) help search engines update their indexes. Use R=302 temporarily if you’re still testing changes.
• Test Your Condition: Verify the rule works by accessing your local site at http://localhost:8888—it should stay on HTTP, while live sites redirect to HTTPS.

内容的提问来源于stack exchange，提问作者Loosie94