Re: Conditionally terminating SSL based on SNI

2016-09-21 Thread PiBa-NL
Hi Willy, Christopher, Do you perhaps have a small update about the "[PATCH] MAJOR: ssl: add 'tcp-fallback' bind option for SSL listeners" ? I've not seen any new information about it for a while, will it come with 1.7devX ? Or should there first be a solid http/2 implementation before

About tune.vars.reqres-max-size

2016-09-21 Thread Dmitry Sivachenko
Hello, after reading documentation about tune.vars.global-max-size tune.vars.reqres-max-size tune.vars.sess-max-size tune.vars.txn-max-size I see no default values here. Can you clarify please? Also it is not obvious for me if tune.vars.reqres-max-size limit applies to every single

Conditionally terminating SSL based on SNI

2016-09-21 Thread Sven Marnach
Hi, I'd like to configure haproxy to listen on a single IP address and port 443. Based on the SNI information of the incoming connections, I'd like to terminate some of the SSL connections on the proxy and send plain HTTP requests to the backend. For other domain names, however, I'd like to