3 ms·
Is it possible to perform mTLS from client->APISIX gateway and pass on the verified certificate details to the upstream (e.g. via headers)? Or is mTLS only pos
by adamckay 4y ago
Is it possible to perform mTLS from client->APISIX gateway and pass on the verified certificate details to the upstream (e.g. via headers)?
Or is mTLS only possible with client->pass through APISIX->upstream? It's not quite clear from the docs.
- chao-zhang 4y agoIt's feasible while you have to write a bit of code to assemble the certificate details to the API request (e.g., request headers, or query string). mTLS is both possible for client -> APISIX and APISIX -> upstream.
- bzp2010 4y agoAs a complement to the first reply, I created a simple DEMO that will implement your needs and I placed it on the GitHub gist [1]. [1] https://gist.github.com/bzp2010/6ce0bf7c15c191029ed54724547195b4 https://gist.github.com/bzp2010/6ce0bf7c15c191029ed547245471...