Hi,
as we are loadbalancing jabberd connections on a common hostname, dialback won't work. Is there a way to set up s2s connections with TLS mutual only (without resolver and dialback)?I already read your original post on jadmin, but still I don't understand your intention by trying this.
We got multiple, balanced targets (so called proxies) in 1st stage. client -> loadbalancer with common name -> c2s -> target1 -> s2s -> server2 client -> loadbalancer with common name -> c2s -> target2 -> s2s -> server2 . Dialback is done against the common name of the load balancer as the initial request from the client was send to this hostname. The id of server1 is set to the common name, too. So I am still just asking how to prevent dialback. Best Regards Marcus
smime.p7s
Description: S/MIME Cryptographic Signature
