<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Maxim,<div class=""><br class=""></div><div class="">I understand. Followup question is:</div><div class=""><br class=""></div><div class="">Is NGINX capable of presenting clients with different SSL certificate based on SNI?</div><div class="">As in:</div><div class=""><br class=""></div><div class="">stream {</div><div class=""> server {</div><div class=""> ssl_certificate <a href="http://foo.example.com" class="">foo.example.com</a>.crt;</div><div class=""> ssl_certificate <a href="http://bar.example.com" class="">bar.example.com</a>.crt;</div><div class=""> ...</div><div class=""> } </div><div class="">}</div><div class=""><br class=""><div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Best Regards,</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Danila</div></div>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 13 Aug 2018, at 00:12, Maxim Dounin <<a href="mailto:mdounin@mdounin.ru" class="">mdounin@mdounin.ru</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hello!<br class=""><br class="">On Sun, Aug 12, 2018 at 11:33:25PM +0300, Danila Vershinin wrote:<br class=""><br class=""><blockquote type="cite" class="">It seems that nginx can accept PROXY protocol fine, but when it <br class="">comes to forwarding, it can only do so only within a stream { <br class="">server { … proxy_protocol on; } } .<br class=""><br class="">Are there any plans to add proxy_protocol on; for regular HTTP <br class="">server blocks so it can be used alongside proxy_pass? This would <br class="">come in very handy in a situation where NGINX is used as SSL <br class="">terminator, e.g.:<br class=""><br class="">NGINX (SSL) → (Proxy protocol) → Varnish.<br class=""><br class="">Varnish supports accepting PROXY protocol.<br class=""></blockquote><br class="">There are no such plans, because in HTTP the same connection can <br class="">be used for requests from different clients. Consider using <br class="">X-Forwarded-For instead.<br class=""><br class="">-- <br class="">Maxim Dounin<br class=""><a href="http://mdounin.ru/" class="">http://mdounin.ru/</a><br class="">_______________________________________________<br class="">nginx mailing list<br class="">nginx@nginx.org<br class="">http://mailman.nginx.org/mailman/listinfo/nginx</div></div></blockquote></div><br class=""></div></body></html>