Welcome! Log In Create A New Profile

Advanced

Re: nginx ssl stream termination for MySQL backends

Maxim Dounin
January 07, 2023 12:58PM
Hello!

On Sat, Jan 07, 2023 at 10:48:31PM +0530, Vishwas Bm wrote:

> Below is the use case which I am trying:
>
> client--->nginx stream(ssl termination) ---> MySQL Db
>
> Connection between nginx and MySQL db is unencrypted.
>
> When I send ssl request using MySQL client, I am getting ssl handshake
> timeout error. I do not see client hello from client in tcpdump capture.
>
> Is the above usecase valid with nginx?
> Has someone tried this configuration ?

The MySQL protocol uses an internal SSL handshake establishment,
which is only happens if both client and server agree to use it.
That is, it works similarly to STARTTLS in SMTP. See here for
details:

https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_tls.html

As such, it is not possible to do simple SSL offloading,
something that nginx stream module can do for you, but rather a
protocol-specific implementation is needed.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

nginx ssl stream termination for MySQL backends

Vishwas Bm January 07, 2023 12:20PM

Re: nginx ssl stream termination for MySQL backends

Maxim Dounin January 07, 2023 12:58PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 177
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready