Re: SNI and haproxy backend selection.

2016-02-21 Thread Eliezer Croitoru
Thanks!! Eliezer On 21/02/2016 14:01, Lukas Tribus wrote: But can I use the SNI hostname to define which backend will haproxy use and by that choose also between different protocol? Absolutely!

RE: SNI and haproxy backend selection.

2016-02-21 Thread Lukas Tribus
> But can I use the SNI hostname to define which backend will haproxy use > and by that choose also between different protocol? Absolutely! http://blog.haproxy.com/2012/04/13/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/ Lukas

Re: SNI and haproxy backend selection.

2016-02-21 Thread Eliezer Croitoru
On 21/02/2016 05:43, Jeff Palmer wrote: You'd probably want to use host header ACLs, and then a use_backend with each acl to select the correct backend. But the Host header is for HTTP only. My question is: I have more then two services and each one of them is using either a TCP or HTTP based

Re: SNI and haproxy backend selection.

2016-02-20 Thread Jeff Palmer
You'd probably want to use host header ACLs, and then a use_backend with each acl to select the correct backend. On Feb 20, 2016 7:12 PM, "Eliezer Croitoru" wrote: > Is it possible to have one TLS frontend(with wildcard certificate) port > that will select the backends

SNI and haproxy backend selection.

2016-02-20 Thread Eliezer Croitoru
Is it possible to have one TLS frontend(with wildcard certificate) port that will select the backends based on the TLS SNI? having one specific default for SNI-less connections? Eliezer