Hi,

I have not tried with thousands of certificates, only some 20-30 or so,
using SNI.
My problem has been that every once in a while the default certificate is
served up, rather than the one for the requested domain.

I have yet to find the cause of this behaviour, but it seems to have
something to do with latency in some sort of way, seeing as most of the
reports I get on the domains I do host come from locations, network-wise,
fairly far away.

As it stands, I wouldn't try serving up mission critical data over HAProxy
using the SNI features.


Regards,
Slaygon


On Thu, Mar 14, 2013 at 6:52 PM, Wei Kong <[email protected]> wrote:

>  Hi,
>
>  We are looking into using the latest haproxy with ssl SNI support. It
> works great with two or three different ssl certificates. But we are
> wondering if it can scale up to thousands or more say 100k ssl certificates.
>
>  Has anyone tried it?
>
>  Thanks a lot. Any information is greatly appreciated.
> Wei
>

Reply via email to