On Tue, Oct 19, 2010 at 05:42:51PM +0300, Reinis Rozitis wrote: >> Have you tried Varnish? >> http://www.varnish-cache.org/ >> It's intended as a caching proxy but can do what you're after perfectly >> well. >> >> Also if there's anything it can't do, you can in-line drop in to C in >> the config files and make it do it! > > As far as I know varnish doesnt support SSL (neither as frontend nor in > backends)? > So you would have to implement some extra layers anyways. > > While I havent tried myself (the URL thing (with providing the key/cert > to the balancer)) you could try Pound ( http://www.apsis.ch/pound/ ) > which supports the client <-- ssl --> balancer (url parsing) <-- ssl > --> backend scheme.. >
Yep, I noticed Pound supports ssl to the backend in the latest version (2.5). Another question: Do you guys know if some balancer allows 'http connect' passthrough? I'd like to pass 'http connect' requests 'as is' to the backend server. For example Pound seems to drop that request.. -- Pasi
