Hello everyone,

I'm totally new to Pound and was wondering about Virtual Hosts & SSL.

Considering Pound 2.6f along with the latest openssl (with SNI support),
will I be able to use the Virtual Host functionality (HeadRequire) along
with incoming SSL connections (different domains) that I'll proxy to
different back-end servers?  Something like this:


------------------------cut here ---------------------

ListenHTTPS
  Address 192.168.1.5
  Port    443
  Cert    "/etc/apache2/ssl/server0.pem"
  Cert    "/etc/apache2/ssl/server1.pem"

  Service
        HeadRequire "Host: .*www.server0.com.*"
        BackEnd
               Address 172.16.80.15
               Port 80
        End
  End

  Service
        HeadRequire "Host: .*www.server1.com.*"
        BackEnd
               Address 172.16.80.16
               Port 80
        End
     End

End
---------------------- cut here ----------------------

I guess Pound will be able to find the proper certificate (due to the
SNI functionality) and afterwards it will send the traffic to the proper
back-end server by means of the "HeadRequire" directive.  Is that all
there's to it?

Thanks!
Jorge

--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to