I have the following file named test.stream which is being included via nginx.conf stream { include /etc/nginx/conf.d/*.stream; }

the ssl_preread_server_name variable is not being extracted and I’m running Nginx/1.13.5 (via centos 7 nginx repo). Any idea whats going on here? tcpdump shows the SNI field.

nginx -V
nginx version: nginx/1.13.5
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-11) (GCC)
built with OpenSSL 1.0.1e-fips 11 Feb 2013
TLS SNI support enabled


map $ssl_preread_server_name $name {
cm.example.com cm;
ut.example.com ut;
}
upstream ut {
server 10.0.0.76:9000;
}
upstream cm {
server 10.0.0.61:9000;
}

log_format stream_routing '$remote_addr [$time_local] '
'with SNI name "$ssl_preread_server_name" '
'proxying to "$name" '
'$protocol $status $bytes_sent $bytes_received '
'$session_time';

server {
listen 443 ssl;

#Certificate & Key .PEM Format
ssl_certificate /etc/ssl/certs/internal_back.crt;
ssl_certificate_key /etc/ssl/certs/internal_back.key;
#CIPHERS
include /etc/nginx/conf.d/tcp.common;

proxy_pass $name;
ssl_preread on;
access_log /var/log/nginx/stream.log stream_routing;
error_log /var/log/nginx/stream-error.log debug;
}


stream.log shows:
107.0.0.186 [11/Sep/2017:20:30:22 -0700] with SNI name "" proxying to "" TCP 500 0 0 0.066
107.0.0.186 [11/Sep/2017:20:30:22 -0700] with SNI name "" proxying to "" TCP 500 0 0 0.048



Thank you,
Brian
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx