> So now when I got a working haproxy 1.4, I continued to try out the
> "option http-server-close" but I hit a problem with our stunnel
> (patched with stunnel-4.22-xforwarded-for.diff) instances. It does not
> support keep-alive, so only the first HTTP request in a
> keepalive-session gets the X-Forwarded-For header added (insert Homer
> "doh!" here :). When giving it some thought, I guess this is the
> expected behaviour for what stunnel actually is supposed to do. So,
> for now I'll stick with "option httpclose" for a while longer...

Maybe try to use some light web server like Nginx or Lighttpd as SSL
proxy instead ?

-- 
Mariusz Gronczewski (XANi) <xani...@gmail.com>
GnuPG: 0xEA8ACE64
http://devrandom.pl

Attachment: signature.asc
Description: To jest część wiadomości podpisana cyfrowo

Reply via email to