Bump. Turns out a bunch of scripts/programs hit my sites that don't do
SNI. Any ideas?
I don't seem to be able to parse HTTP headers with TCP frontend.
On Mon, Jun 8, 2015 at 6:10 PM, Lukas Tribus luky...@hotmail.com wrote:
Also more importantly, can I use proxy protocol with TCP backends? I
Bump. Turns out a bunch of scripts/programs hit my sites that don't do
SNI. Any ideas?
Virtual HTTPS hosting needs SNI. If your clients/script doesn't support SNI,
you cannot host more than one certificate with one IP.
Doesn't have anything todo with SPDY or Haproxy, its just how things are.
On Wed, Jun 10, 2015 at 8:45 PM, Lukas Tribus luky...@hotmail.com wrote:
Bump. Turns out a bunch of scripts/programs hit my sites that don't do
SNI. Any ideas?
Virtual HTTPS hosting needs SNI. If your clients/script doesn't support SNI,
you cannot host more than one certificate with one IP.
A stupid question:
Does SPDY require to use SNI on client side?
SPDY requires NPN or ALPN. I'm not sure if the SPDY specification
insist on SNI, but basically all SPDY clients also support SNI.
This is imo a non-problem.
If not, what does it happen if the client doesn't send any SNI
2015-06-06 10:19 GMT+02:00 Viranch Mehta viranc...@directi.com:
Hey Lukas,
On Fri, Jun 5, 2015 at 10:31 PM, Lukas Tribus luky...@hotmail.com wrote:
Hi Viranch,
tcp-request inspect-delay 5s
tcp-request content accept if HTTP
Whats that configuration supposed to do? It doesn't
make any
Also more importantly, can I use proxy protocol with TCP backends? I
need TCP backends to support SPDY.
http://trac.nginx.org/nginx/ticket/355#comment:2 seems to indicate
that it does, but I just wanted to confirm.
On Mon, Jun 8, 2015 at 5:19 PM, Viranch Mehta viranc...@directi.com wrote:
On
Also more importantly, can I use proxy protocol with TCP backends? I
need TCP backends to support SPDY.
Yes, thats exactly the point of the proxy protocol.
Lukas
On Sun, Jun 7, 2015 at 10:18 AM, Willy Tarreau w...@1wt.eu wrote:
On Sat, Jun 06, 2015 at 02:00:11PM +0530, Viranch Mehta wrote:
Hey,
One more thing: I'd also prefer to be able to add X-Forwarded-*
headers to the proxied requests. While I don't see this possible due
to TCP backends, is there
Hey Lukas,
On Fri, Jun 5, 2015 at 10:31 PM, Lukas Tribus luky...@hotmail.com wrote:
Hi Viranch,
tcp-request inspect-delay 5s
tcp-request content accept if HTTP
Whats that configuration supposed to do? It doesn't
make any sense.
SPDY requires me to forward TCP frames to the backend, so I
Hey,
One more thing: I'd also prefer to be able to add X-Forwarded-*
headers to the proxied requests. While I don't see this possible due
to TCP backends, is there a possible workaround?
On Sat, Jun 6, 2015 at 1:49 PM, Viranch Mehta viranc...@directi.com wrote:
Hey Lukas,
On Fri, Jun 5, 2015
On Sat, Jun 06, 2015 at 02:00:11PM +0530, Viranch Mehta wrote:
Hey,
One more thing: I'd also prefer to be able to add X-Forwarded-*
headers to the proxied requests. While I don't see this possible due
to TCP backends, is there a possible workaround?
For TCP, you can enable the proxy
Hi Viranch,
tcp-request inspect-delay 5s
tcp-request content accept if HTTP
Whats that configuration supposed to do? It doesn't
make any sense.
acl spdy ssl_fc_npn -i spdy/3.1
acl site1 req.hdr(Host) -i site1.foo.com
acl site2 req.hdr(Host) -i site2.foo.com
use_backend site1_spdy if
12 matches
Mail list logo
