Re: SNI healthcheck on backend?

2016-06-19 Thread Ray Cote
Hi Willy: On Fri, Jun 17, 2016 at 5:59 AM, Willy Tarreau wrote: > I think at this point we'd rather add an "sni" argument to the tcp-check > connect, then you could resort to this one instead. That would allow you > to write whatever complex sequence as you'd like. > Agree that this sounds like

Re: SNI healthcheck on backend?

2016-06-17 Thread Willy Tarreau
Hi Ray, On Wed, Jun 15, 2016 at 11:43:55AM -0400, Ray Cote wrote: > In my use case, I???m connecting HTTP on the front-end and using HAProxy > backend to balance against several third-party HTTPS servers. > The SNI parameter on the server line is hardcoded. > A health check parameter such as use_s

Re: SNI healthcheck on backend?

2016-06-15 Thread Ray Cote
Hi Willy: On Tue, Jun 14, 2016 at 5:02 AM, Willy Tarreau wrote: > > Can the Health Check be driven by the SNI parameter in the server line? > > No because the SNI parameter takes an expression. People will typically > use "ssl_fc_sni" here, meaning that the SNI of the front connection has > to b

Re: SNI healthcheck on backend?

2016-06-14 Thread Willy Tarreau
Hi Ray, On Fri, Jun 10, 2016 at 02:15:56PM -0400, Ray Cote wrote: > Can the Health Check be driven by the SNI parameter in the server line? No because the SNI parameter takes an expression. People will typically use "ssl_fc_sni" here, meaning that the SNI of the front connection has to be extract

Re: SNI healthcheck on backend?

2016-06-10 Thread Ray Cote
On Fri, Jun 10, 2016 at 12:50 PM, Willy Tarreau wrote: > Hi Ray, > > On Thu, Jun 09, 2016 at 01:49:02PM -0400, Ray Cote wrote: > > On Thu, Jun 9, 2016 at 12:10 PM, wrote: > > > > > http://discourse.haproxy.org/t/can-1-6-do-sni-on-backend/278/12 > > > > > > > I???ve been looking for an official p

Re: SNI healthcheck on backend?

2016-06-10 Thread Willy Tarreau
Hi Ray, On Thu, Jun 09, 2016 at 01:49:02PM -0400, Ray Cote wrote: > On Thu, Jun 9, 2016 at 12:10 PM, wrote: > > > http://discourse.haproxy.org/t/can-1-6-do-sni-on-backend/278/12 > > > > I???ve been looking for an official place to post a request ticket for this > (I???m the originator of that t

Re: SNI healthcheck on backend?

2016-06-09 Thread Ray Cote
On Thu, Jun 9, 2016 at 12:10 PM, wrote: > http://discourse.haproxy.org/t/can-1-6-do-sni-on-backend/278/12 > I’ve been looking for an official place to post a request ticket for this (I’m the originator of that thread). Yes, it does seem that HAProxy 1.6 does not send the SNI header during the he

SNI healthcheck on backend?

2016-06-09 Thread rainer
Hi, I came upon this thread: http://discourse.haproxy.org/t/can-1-6-do-sni-on-backend/278/12 Is this true? I can't do healthchecks on a backend that needs to do SNI to the target-server? BTW: is there a (public) bug-database for haproxy? I couldn't find one on the web-page. As haproxy does