Welcome! Log In Create A New Profile

Advanced

Re: PROXY protocol to upstream server

Danila Vershinin
August 12, 2018 06:40PM
Hi Maxim,

I understand. Followup question is:

Is NGINX capable of presenting clients with different SSL certificate based on SNI?
As in:

stream {
server {
ssl_certificate foo.example.com http://foo.example.com/.crt;
ssl_certificate bar.example.com http://bar.example.com/.crt;
...
}
}

Best Regards,
Danila

> On 13 Aug 2018, at 00:12, Maxim Dounin <mdounin@mdounin.ru> wrote:
>
> Hello!
>
> On Sun, Aug 12, 2018 at 11:33:25PM +0300, Danila Vershinin wrote:
>
>> It seems that nginx can accept PROXY protocol fine, but when it
>> comes to forwarding, it can only do so only within a stream {
>> server { … proxy_protocol on; } } .
>>
>> Are there any plans to add proxy_protocol on; for regular HTTP
>> server blocks so it can be used alongside proxy_pass? This would
>> come in very handy in a situation where NGINX is used as SSL
>> terminator, e.g.:
>>
>> NGINX (SSL) → (Proxy protocol) → Varnish.
>>
>> Varnish supports accepting PROXY protocol.
>
> There are no such plans, because in HTTP the same connection can
> be used for requests from different clients. Consider using
> X-Forwarded-For instead.
>
> --
> Maxim Dounin
> http://mdounin.ru/
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

PROXY protocol to upstream server

Danila Vershinin August 12, 2018 04:34PM

Re: PROXY protocol to upstream server

Maxim Dounin August 12, 2018 05:14PM

Re: PROXY protocol to upstream server

Danila Vershinin August 12, 2018 06:40PM

Re: PROXY protocol to upstream server

Maxim Dounin August 13, 2018 10:22AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 95
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 254 on July 05, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready