3 ms·
Fronting a switch management interface with haproxy? Are you sure that is a good idea?
by whatevaa 1y ago
Fronting a switch management interface with haproxy? Are you sure that is a good idea?
- 9dev 1y agoYes. If we're talking about handling TLS termination and putting an IP behind a sensible hostname, I don't see what's wrong about using a reverse proxy. Note that this does not imply making it accessible on the internet.
- FuriouslyAdrift 1y agoYet more infra that must now be managed and a point of failure. No thank you.
- 9dev 1y agoWell. That, or maintaining bespoke PKI and internal CA, along with manually renewing certificates with ever-shortened expiration periods as demanded by browsers. Pick your poison.
- FuriouslyAdrift 1y agoWindows infra so certificate services is already baked in for 802.1x, etc.