highkay commented on issue #3147:
URL: https://github.com/apache/apisix/issues/3147#issuecomment-751915716


   > > Well I dig the issues and found someone said the sni doesnot support ip
   > 
   > The RFC 6066 says "Literal IPv4 and IPv6 addresses are not permitted" in 
the SNI: https://tools.ietf.org/html/rfc6066
   > Even we don't follow the RFC, the client may follow it and do not send SNI 
when the target is an IP. So support IP at our side doesn't always work.
   > 
   > > use a self signed cert for ip in apisix
   > 
   > What about using a virtual domain like k8s's svc.cluster.local?
   
   I delievered the app in an enviroment in intranet without virtual domain. I 
just wonder apisix could work like nginx or traefic, setting a default self 
signed cert for "*". 


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to