proxy_ssl_session_reuse not working with dynamic proxy_pass
gchiesa
nginx-forum at forum.nginx.org
Fri Jan 25 15:21:55 UTC 2019
Hi,
I'm trying to enable the proxy_ssl_session_reuse with dynamic proxy_pass as
per the following config.
---
server {
listen 80;
server_name localhost;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 4h;
proxy_ssl_session_reuse on;
proxy_ssl_protocols TLSv1.2;
proxy_ssl_ciphers
EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
proxy_ssl_server_name on;
proxy_socket_keepalive on;
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
set $upstream_server https://myupstream.com;
location /test/ {
# forward the request id received in the headers to the
upstream
proxy_set_header X-Request-Id $http_x_request_id;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host "myupstream.com";
resolver 8.8.8.8;
rewrite ^/test/(.*) /$1 break;
proxy_pass $upstream_server;
# completely disable proxy cache
expires off;
sendfile off;
}
}
---
but the proxy module does not honor proxy_ssl_session_reuse.
Instead if in the case of NOT DYNAMIC resolution it works fine. Example:
---
server {
listen 80;
server_name localhost;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 4h;
proxy_ssl_session_reuse on;
proxy_ssl_protocols TLSv1.2;
proxy_ssl_ciphers
EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
proxy_ssl_server_name on;
proxy_socket_keepalive on;
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
location /test/ {
# forward the request id received in the headers to the
upstream
proxy_set_header X-Request-Id $http_x_request_id;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host "myupstream.com";
resolver 8.8.8.8;
rewrite ^/test/(.*) /$1 break;
proxy_pass https://myupstream.com;
# completely disable proxy cache
expires off;
sendfile off;
}
}
---
Does anybody have any idea how (if possible) to make the
proxy_ssl_session_reuse work with dynamic resolution?
Thanks
Peppe
Posted at Nginx Forum: https://forum.nginx.org/read.php?2,282830,282830#msg-282830
More information about the nginx
mailing list