4 ms·

I can't speak for Apache configurations, but on-the-fly cert lookup is possible in nginx using the lua_nginx module[1] - IIRC that feature was developed by Clou

I can't speak for Apache configurations, but on-the-fly cert lookup is possible in nginx using the lua_nginx module[1] - IIRC that feature was developed by Cloudflare, to power their SSL termination. [1]: https://github.com/openresty/lua-nginx-module/#ssl_certificate_by_lua_block https://github.com/openresty/lua-nginx-module/#ssl_certifica...

scurvy 10y ago
I was also wondering about this. I would have put in the engineering effort to migrate to nginx (at least as a front-end proxy) from Apache for this. Seems like a lot of reloads that could be avoided (even doing graceful reloads in Apache gives me the willies).
- seanp2k2 10y ago
  http://kb.linuxvirtualserver.org/wiki/IPVS http://kb.linuxvirtualserver.org/wiki/IPVS This stuff is ancient but still works great.
  - scurvy 10y ago
    LVS/IPVS is OK, but what does it have to do with SSL termination and certificate churn?