Re: Sharing SSL information via PROXY protocol or HAProxy internally

2016-10-17 Thread Lukas Erlacher
Hi, For this specific case of http to https redirect I use the X-Forwarded-Proto header. In the ssl frontend I do this: http-request set-header X-Forwarded-Proto https and in the plain http frontend I do this: http-request redirect scheme https if !{ req.hdr(X-Forwarded-Proto) https } The

Re: Sharing SSL information via PROXY protocol or HAProxy internally

2016-10-16 Thread haproxy
I too am interested in this functionality. Looking at the proxy protocol documentation (http://www.haproxy.org/download/1.6/doc/proxy-protocol.txt), it seems that the requisite information is present in the PP2 header: " The PP2_CLIENT_SSL flag indicates that the client connected over SSL/TLS.".

Re: Sharing SSL information via PROXY protocol or HAProxy internally

2016-04-16 Thread Christian Ruppert
Hi Dennis, On 2016-04-16 02:13, Dennis Jacobfeuerborn wrote: On 15.04.2016 16:01, Christian Ruppert wrote: Hi, would it be possible to inherit the SSL information from a SSL listener/frontend via PROXY protocol? So for example: listen ssl-relay mode tcp ... server rsa

Re: Sharing SSL information via PROXY protocol or HAProxy internally

2016-04-15 Thread Dennis Jacobfeuerborn
On 15.04.2016 16:01, Christian Ruppert wrote: > Hi, > > would it be possible to inherit the SSL information from a SSL > listener/frontend via PROXY protocol? > So for example: > > listen ssl-relay > mode tcp > > ... > > server rsa unix@/var/run/haproxy_ssl_rsa.sock send-proxy-v2 >

Sharing SSL information via PROXY protocol or HAProxy internally

2016-04-15 Thread Christian Ruppert
Hi, would it be possible to inherit the SSL information from a SSL listener/frontend via PROXY protocol? So for example: listen ssl-relay mode tcp ... server rsa unix@/var/run/haproxy_ssl_rsa.sock send-proxy-v2 listen ssl-rsa_ecc mode tcp ... bind