Re: HAProxy - Combination of SSL Termination and Pass through

2015-08-14 Thread Danijel Starman
Hi, On Fri, Aug 14, 2015 at 12:53 PM, Aleksandar Lazic al-hapr...@none.at wrote: Hi. Am 13-08-2015 08:45, schrieb Baptiste: Hi Sandeep, No, HAProxy doesn't pass through. [snipp] What you mean by passthrough would be something like: listen ssl_passthourgh mode tcp bind :443

Re: HAProxy - Combination of SSL Termination and Pass through

2015-08-14 Thread Aleksandar Lazic
Hi. Am 13-08-2015 08:45, schrieb Baptiste: Hi Sandeep, No, HAProxy doesn't pass through. [snipp] What you mean by passthrough would be something like: listen ssl_passthourgh mode tcp bind :443 server 10.0.0.1:443 Maybe that this 'passthrough' wording comes from openshift

Re: HAProxy - Combination of SSL Termination and Pass through

2015-08-13 Thread Baptiste
Hi Sandeep, No, HAProxy doesn't pass through. HAProxy can terminate SSL then create a new ciphered connection: listen ssl_reencryption mode http bind :443 ssl crt /path/to/your/cert server 10.0.0.1:443 ssl What you mean by passthrough would be something like: listen ssl_passthourgh

Re: HAProxy - Combination of SSL Termination and Pass through

2015-08-12 Thread Sandeep Jindal
Hi Baptiste, Not sure if that answers my question. What you suggested is to enable SSL for HAProxy. My use case if one step further. Once HAProxy receives the SSL request, after decrypting it, use case require to manipulate headers and then forward the request to a a bendend server which is SSL

Re: HAProxy - Combination of SSL Termination and Pass through

2015-07-31 Thread Baptiste
On Fri, Jul 31, 2015 at 4:12 AM, Sandeep Jindal sandeep...@gmail.com wrote: Hi All, My use case is to Manipulate Request Headers of the incoming request. So, for this, I would need to create a new SSL certificate, but it seems at HTTP level. Can you please suggest if this is possible and

HAProxy - Combination of SSL Termination and Pass through

2015-07-30 Thread Sandeep Jindal
Hi All, My use case is to Manipulate Request Headers of the incoming request. So, for this, I would need to create a new SSL certificate, but it seems at HTTP level. Can you please suggest if this is possible and how? Regards Sandeep Jindal *201 604 5277*