Re: Extending Proxy Protocol

2014-01-30 Thread Willy Tarreau
Hi David, On Wed, Jan 29, 2014 at 10:53:22PM -0500, David S wrote: I want to use HAProxy to terminate my incoming SSL connections and forward the messages to my server application. My challenge is that my application needs information from the client certificates. The Proxy Protocol is

Re: Extending Proxy Protocol

2014-01-30 Thread Neil
On 30 Jan 2014 08:12, Willy Tarreau w...@1wt.eu wrote: Hi David, On Wed, Jan 29, 2014 at 10:53:22PM -0500, David S wrote: I want to use HAProxy to terminate my incoming SSL connections and forward the messages to my server application. My challenge is that my application needs

Re: Extending Proxy Protocol

2014-01-30 Thread Willy Tarreau
On Thu, Jan 30, 2014 at 09:19:34AM +, Neil wrote: Another http proxy 'pound' passes on this information by added http headers similar to x-forwarded-for. It would,imho, be great to be able to take arbitary headers from client and mangle and pass them on to backend servers or use in acls

Re: Extending Proxy Protocol

2014-01-30 Thread Baptiste
Already the case: http://blog.exceliance.fr/2013/06/13/ssl-client-certificate-information-in-http-headers-and-logs/ Baptiste On Thu, Jan 30, 2014 at 10:19 AM, Neil n...@iamafreeman.com wrote: On 30 Jan 2014 08:12, Willy Tarreau w...@1wt.eu wrote: Hi David, On Wed, Jan 29, 2014 at