Hello!

On Thu, Mar 11, 2021 at 09:28:49PM +0300, geniuss99 wrote:

> src/http/modules/ngx_http_upstream_keepalive_module.c | 42 +++++++++++++++++++
> 1 files changed, 42 insertions(+), 0 deletions(-)
>
>
> # HG changeset patch
> # User geniuss99 <geniuss.dev@gmail.com>
> # Date 1615484979 -10800
> # Thu Mar 11 20:49:39 2021 +0300
> # Node ID ed1348e8e25381b3b1a2540289effcf7ccec6fd6
> # Parent 0215ec9aaa8af6036c62e1db676c9b0cc1d5fca4
> Keepalive: add new option "keepalive_ssl_respect_sni".
>
> This option allows handling the following usecase:
> 1. proxy https requests with different hostnames to server with same ip;
> 2. use cache of upstream connections via keepalive option in upstream module;
> 3. reuse connection from keepalive pool only if ip and servername used during
> handshake with upstream match hostname from downstream request.
>
> When this option is turned on not only the ip address of upstream server is
> taken into account upon connection search but also servername used during
> handshake procedure.

Thank you for the patch. Please see the answer here:

http://mailman.nginx.org/pipermail/nginx-devel/2019-August/012583.html

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel