RE: NGINX SSL passthrough without certificate

2014-09-05 Thread Lukas Tribus
Hi, We currently have a backend server that listens for SSL requests, and (using SNI) chooses to pass them on to the correct place, or alternatively will serve the requested HTTPS. Our current configuration is slow (not painfully, just slower than we'd like), and we figured having NGINX do

Re: RE: NGINX SSL passthrough without certificate

2014-09-05 Thread OzJD
Hi Lukas, While HAProxy is able to do some of those things (not sure about X-FORWARDED-FOR workarounds?), I'd still prefer to use NGINX where possible (for other reasons, such as PageSpeed support, etc) Is NGINX able to do any of the things mentioned in the question? Specifically, can it sort by

RE: NGINX SSL passthrough without certificate

2014-09-05 Thread Lukas Tribus
Hi, Hi Lukas, While HAProxy is able to do some of those things (not sure about X-FORWARDED-FOR workarounds?) Yes, haproxy supports and pushes the PROXY protocol for this exact reason. I'd still prefer to use NGINX where possible (for other reasons, such as PageSpeed support, etc)

Re: RE: NGINX SSL passthrough without certificate

2014-09-05 Thread OzJD
Lukas, I think you're right. The combination of three may be optimal at this time. I'll see what I come up with - I hadn't heard of the PROXY protocol before (was thinking of something similar though). That's made my life plenty easier! Thanks mate :-) Posted at Nginx Forum: