On Tue, Apr 23, 2013 at 04:10:55PM +0200, Willy Tarreau wrote:
> On Tue, Apr 23, 2013 at 04:30:12PM +0300, Pasi Kärkkäinen wrote:
> > On Tue, Apr 23, 2013 at 07:50:56AM +0200, Willy Tarreau wrote:
> > > Hi,
> > > 
> > > On Tue, Apr 23, 2013 at 05:29:26AM +0300, Pasi Kärkkäinen wrote:
> > > > Hello,
> > > > 
> > > > Is it currently possible to pass "HTTP CONNECT" requests directly to 
> > > > the backend server?
> > > > 
> > > > So haproxy itself shouldn't try to connect anywhere, but instead 
> > > > directly pass
> > > > the request to the backend, and let backend handle it.
> > > 
> > > Not only it is possible, but it is the only thing it can do :-) Keep in
> > > mind that haproxy is a reverse-proxy and not a proxy, so it will not try
> > > to resolve a host to connect to a specific location for example. Thus, if
> > > it receives a request such as "CONNECT foo:443 HTTP/1.1", it will not try
> > > to resolved "foo", it will send it to one of the servers declared in the
> > > backend. And it is the same for all methods, there is nothing specific to
> > > CONNECT.
> > > 
> > 
> > Hmm, I remember trying it earlier (a couple of years ago), and then it 
> > didn't work..
> 
> There is no reason. It's been used since maybe version 1.1 (10 years ago)
> in front of proxies where this was already working. So if you see any
> failure, please report !
> 

Ok, will do.

-- Pasi


Reply via email to