Welcome! Log In Create A New Profile

Advanced

RE: NGINX SSL passthrough without certificate

All files from this thread

File Name File Size   Posted by Date  
linkedin.png 655 bytes open | download Miguel Clara 09/05/2014 Read message
Lukas Tribus
September 05, 2014 04:18AM
Hi,


> We currently have a backend server that listens for SSL requests, and (using
> SNI) chooses to pass them on to the correct place, or alternatively will
> serve the requested HTTPS.
>
> Our current configuration is slow (not painfully, just slower than we'd
> like), and we figured having NGINX do some of the work would speed things
> up.
>
> Can NGINX pass through some HTTPS requests (by domain) without modifying
> anything (by checking SNI in the initial packet)? Most (all?) websites
> indicate that I should decode and encode the traffic (which is not be
> possible because of cases such as https://google.com/).
>
> So ultimately, what would be ideal for us is:
> 1. NGINX sits on network boundary, listening for SSL/TLS connections
> 2. When a new connection comes in, NGINX decides to pass on the TLS
> connection without touching it OR serve it as a regular HTTPS website (OR
> depends on domain)
>
> Lastly, is there any current way to achieve X-FORWARDED-FOR with HTTPS? I
> understand it can't go into the actual HTTPS request, but figured it could
> be sent BEFORE the HTTPS decode packet. (the receiving end would have to
> understand this also)

For all those things, haproxy is way more adequate.



Regards,

Lukas


_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

NGINX SSL passthrough without certificate

OzJD September 05, 2014 04:04AM

RE: NGINX SSL passthrough without certificate

Lukas Tribus September 05, 2014 04:18AM

Re: RE: NGINX SSL passthrough without certificate

OzJD September 05, 2014 05:43AM

RE: NGINX SSL passthrough without certificate

Lukas Tribus September 05, 2014 06:24AM

Re: RE: NGINX SSL passthrough without certificate

OzJD September 05, 2014 07:54AM

urgent need help ,ssl error ;

vk1dadhich September 05, 2014 10:11AM

Re: urgent need help ,ssl error ;

vk1dadhich September 05, 2014 10:13AM

Re: urgent need help ,ssl error ; Attachments

Miguel Clara September 05, 2014 10:16AM

Re: urgent need help ,ssl error ;

GreenGecko September 06, 2014 08:54PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 69
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready