3 ms·
What about for your server-side stuff? Like caching in Varnish?
by tibbon 14y ago
What about for your server-side stuff? Like caching in Varnish?
- halfasleep 14y agoYou can do the SSL before Varnish, then it makes no difference.
- jbooth 14y agoDoes that work? Each client has its own key, so your caching goes from "one cached copy for everyone" to "one cached copy per client", right? Or am I missing something there?
- cortesoft 14y agoNo, you could still have one cached copy for everyone. The SSL termination happens before the user's request gets to the caching server. As far as the cache is concerned, it is a regular http request. The only problem is you cannot have generic caches that live closer to the end user; the cache has to be controlled by the person controlling the SSL termination.
- jbooth 14y agoSo you're talking about caching the cleartext and then encrypting it for each client, which is totally doable. I (possibly mis-) understood the original comment to be claiming that you could cache the ciphertext, to which I just wanted to make sure I wasn't missing some huge piece of understanding.
- X-Istence 14y agoVarnish doesn't do HTTPS... so you have to put something that does SSL in front of varnish, which sits in front of your real web server: SSL -> varnish -> backend varnish -> backend