Hi Viranch,

> tcp-request inspect-delay 5s
> tcp-request content accept if HTTP

Whats that configuration supposed to do? It doesn't
make any sense.



> acl spdy ssl_fc_npn -i spdy/3.1
> acl site1 req.hdr(Host) -i site1.foo.com
> acl site2 req.hdr(Host) -i site2.foo.com
>
> use_backend site1_spdy if spdy site1

You can't match a Host Header if the protocol is not HTTP
(but SPDY).


Try using SNI instead, and distinguish plaintext and SNI
ACLs:


acl spdy ssl_fc_npn -i spdy/3.1

acl site1_sni ssl_fc_sni -i site1.foo.com
acl site2_sni ssl_fc_sni -i site2.foo.com

acl site1_plaintext req.hdr(Host) -i site1.foo.com
acl site2_plaintext req.hdr(Host) -i site2.foo.com

use_backend site1_spdy if spdy site1_sni
use_backend site1_http if site1_plaintext

use_backend site2_spdy if spdy site2_sni
use_backend site2_http if site2_plaintext




Regards,

Lukas

                                          

Reply via email to