Hello,
is it possible to inspect http headers (like hostname/uri) and do backend
switching in tcp mode via spdy?
My config is something like:
...
frontend app
bind :443 ssl crt cert.pem npn spdy/3.1,http/1.1
tcp-request inspect-delay 5s
tcp-request content accept if HTTP
acl is_upload hdr_beg(host) -i upload
acl spdy ssl_fc_npn -i spdy/3.1
use_backend upload_spdy if is_upload spdy
use_backend upload if is_upload
use_backend www_spdy if spdy
default_backend www
...
In short - I want to use a single haproxy instance and switch backends based
on Layer 7 information while still providing spdy when possible.
If the client doesn't support spdy (like IE etc) the configuration works as
expected but for spdy-enabled clients everything falls back to default
backend.
I tried to experiment also with making the acl with 'req_ssl_sni' but it
doesn't work in case of spdy either (I wouldn't want to use the SNI approach
anyways since there are quite a lot of clients (like android 2.3.x/XP etc)
which don't support it).
Is it in any way possible (like different approach to deal with the spdy
protocol) or just better switch back to http mode and forget spdy?
rr