4 ms·
It exposes a variable with the TLS SNI extension value for you to do stuff with in config: http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html h
by an_account_name 10y ago
It exposes a variable with the TLS SNI extension value for you to do stuff with in config:
http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_modul...
It's not clear from config whether you had to have already presented a valid certificate at that phase, though, or if it's just something you can use to check if it agrees with the Host header.
- brazzledazzle 10y agoYou couldn't do this before? I thought it already had parity with haproxy in this respect.
- kpcyrd 10y agothis is spot on nginx is able to forward tcp streams without negotiating https or expecting http, from the docs it looks like this is for tcp streams only.
- jpgvm 10y agoIt has to be for TCP only because it can't do L7 balancing without terminating TLS.