Hi Cyril, Am 19.07.2016 um 00:27 schrieb Cyril Bonté: > You probably have an issue here : hdr(host) won't work with mode tcp. > If you wan't to check the domain provided by SNI, you should use > req.ssl_sni instead. > > Have a look to the example provided in the documentation : > http://cbonte.github.io/haproxy-dconv/1.6/configuration.html#req.ssl_sni
thanks a lot! I got it working using ssl_fc_sni. As haproxy terminates the ssl connection I think it should be save to use ssl_fc_sni. Or is there I reason I should prefer req_ssl_sni instead? Gruß Matthias -- "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook
