deonvdv opened a new pull request #8957:
URL: https://github.com/apache/pulsar/pull/8957


   ### Motivation
   Implementation of 
[PIP-60](https://github.com/apache/pulsar/wiki/PIP-60:-Support-Proxy-server-with-SNI-routing)
   A proxy server is a go‑between or intermediary server that forwards requests 
from multiple clients to different servers across the Internet. The proxy 
server can act as a “traffic cop,” in both forward and reverse proxy scenarios, 
and adds various benefits in your system such as load balancing, performance, 
security, auto-scaling, etc.. There are already many proxy servers already 
available in the market which are fast, scalable and more importantly covers 
various essential security aspects that are needed by the large organization to 
securely share their confidential data over the network. Pulsar already 
provides proxy implementation PIP-1 which acts as a reverse proxy and creates a 
gateway in front of brokers. However, pulsar doesn’t provide support to use 
other proxies such as Apache traffic server (ATS), HAProxy, Nginx, Envoy those 
are more scalable and secured. Most of these proxy-servers support SNI ROUTING 
which can route traffic to a destination without having to t
 erminate the SSL connection. Routing at layer 4 gives greater transparency 
because the outbound connection is determined by examining the destination 
address in the client TCP packets.
   Netty supports sending SNI header on TLS handshake and this PR uses that 
Netty feature to send SNI header while connecting to proxy.
   
   ### Modification
   
[https://github.com/apache/pulsar/wiki/PIP-60:-Support-Proxy-server-with-SNI-routing](https://github.com/apache/pulsar/wiki/PIP-60):-Support-Proxy-server-with-SNI-routing#changes


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to