PROXY protocol to upstream server

Maxim Dounin mdounin at mdounin.ru
Mon Aug 13 14:20:05 UTC 2018


Hello!

On Mon, Aug 13, 2018 at 01:38:38AM +0300, Danila Vershinin wrote:

> I understand. Followup question is:
> 
> Is NGINX capable of presenting clients with different SSL certificate based on SNI?
> As in:
> 
> stream {
>    server {
>         ssl_certificate foo.example.com <http://foo.example.com/>.crt;
>         ssl_certificate bar.example.com <http://bar.example.com/>.crt;
>         ...
>    }
> }

No, currently there is no SNI support in the stream module (except 
$ssl_preread_server_name in the stream ssl preread module, see 
http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html).

-- 
Maxim Dounin
http://mdounin.ru/


More information about the nginx mailing list