On Mon, Aug 4, 2014 at 4:32 PM, Reinis Rozitis <[email protected]> wrote: > Hello, > is it possible to inspect http headers (like hostname/uri) and do backend > switching in tcp mode via spdy? > > > My config is something like: > > ... > frontend app > bind :443 ssl crt cert.pem npn spdy/3.1,http/1.1 > > tcp-request inspect-delay 5s > tcp-request content accept if HTTP > > acl is_upload hdr_beg(host) -i upload > acl spdy ssl_fc_npn -i spdy/3.1 > > use_backend upload_spdy if is_upload spdy > use_backend upload if is_upload > use_backend www_spdy if spdy > > default_backend www > ... > > In short - I want to use a single haproxy instance and switch backends based > on Layer 7 information while still providing spdy when possible. > > If the client doesn't support spdy (like IE etc) the configuration works as > expected but for spdy-enabled clients everything falls back to default > backend. > > > I tried to experiment also with making the acl with 'req_ssl_sni' but it > doesn't work in case of spdy either (I wouldn't want to use the SNI approach > anyways since there are quite a lot of clients (like android 2.3.x/XP etc) > which don't support it). > > Is it in any way possible (like different approach to deal with the spdy > protocol) or just better switch back to http mode and forget spdy? > > rr >
Hi Reinis, This is not possible. You could try to play with SNI if the client sent it. It could help you to use it to "emulate" content switching based on HTTP Host header. Baptiste

