Hello,
is it possible to inspect http headers (like hostname/uri) and do backend switching in tcp mode via spdy?


My config is something like:

...
frontend app
bind :443 ssl crt cert.pem npn spdy/3.1,http/1.1

tcp-request inspect-delay 5s
tcp-request content accept if HTTP

acl is_upload hdr_beg(host) -i upload
acl spdy ssl_fc_npn -i spdy/3.1

use_backend upload_spdy if is_upload spdy
use_backend upload if is_upload
use_backend www_spdy if spdy

default_backend www
...

In short - I want to use a single haproxy instance and switch backends based on Layer 7 information while still providing spdy when possible.

If the client doesn't support spdy (like IE etc) the configuration works as expected but for spdy-enabled clients everything falls back to default backend.


I tried to experiment also with making the acl with 'req_ssl_sni' but it doesn't work in case of spdy either (I wouldn't want to use the SNI approach anyways since there are quite a lot of clients (like android 2.3.x/XP etc) which don't support it).

Is it in any way possible (like different approach to deal with the spdy protocol) or just better switch back to http mode and forget spdy?

rr

Reply via email to