On Fri, May 24, 2019 at 08:54:23PM +0800, Sathish Kumar wrote:

Hi there,

> Server1: 2.2.2.2 - abc.domain.com, Port 443
>
> Server2: 1.1.1.1 - def.domain.com and def.abc.com - Port 443

That suggests that your back-end server is running more than one https
server on the same IP:port.

Does it use a single cert with multiple Subject Alternate Names; or does
it use individual certs and SNI?

Do you see what you expect when you run from Server1:

curl -v -k -H Host:def.domain.com https://1.1.1.1/abc

and

curl -v -k -H Host:def.abc.com https://1.1.1.1/abc

?

f
--
Francis Daly francis@daoine.org
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx