> So now when I got a working haproxy 1.4, I continued to try out the > "option http-server-close" but I hit a problem with our stunnel > (patched with stunnel-4.22-xforwarded-for.diff) instances. It does not > support keep-alive, so only the first HTTP request in a > keepalive-session gets the X-Forwarded-For header added (insert Homer > "doh!" here :). When giving it some thought, I guess this is the > expected behaviour for what stunnel actually is supposed to do. So, > for now I'll stick with "option httpclose" for a while longer...
Maybe try to use some light web server like Nginx or Lighttpd as SSL proxy instead ? -- Mariusz Gronczewski (XANi) <xani...@gmail.com> GnuPG: 0xEA8ACE64 http://devrandom.pl
signature.asc
Description: To jest część wiadomości podpisana cyfrowo