Hi Lukas, On Sun, Oct 22, 2017 at 05:37:00PM +0200, Lukas Tribus wrote: > 2017-10-17 18:12 GMT+02:00 Willy Tarreau <[email protected]>: > > On Tue, Oct 17, 2017 at 05:36:19PM +0200, Olivier Houchard wrote: > >> Hi, > >> > >> The attached patch adds a new keyword to servers, "check-sni", that lets > >> you > >> specify which SNI to use when doing health checks over SSL. > > > > And applied as well (I thought we already had this). Thanks! > > We may want to consider this feature for a 1.7 backport. > > I just had exactly this use-case and needed health-checks to trigger DNS > resolution on a backend with a "strict-sni" kind-of configuration. I > also believe > people have complained about the lack of SNI in health checks in the past.
In my opinion it makes sense, indeed. The patch is small and totally isolated, and cannot cause any regression as the code is not triggered if the option is not enabled. And as I mentionned, I already thought we has the feature so I probably have advised some people to use it while it wasn(t there :-) Cheers, Willy
