hf400159 commented on code in PR #8215:
URL: https://github.com/apache/apisix/pull/8215#discussion_r1020829863
##########
docs/en/latest/FAQ.md:
##########
@@ -281,6 +286,30 @@ To configure Apache APISIX to listen on multiple ports,
you can:
2. Reload or restart Apache APISIX.
+## After uploading the SSL certificate, why can't the corresponding route be
accessed through HTTPS + IP?
+
+If you directly use HTTPS + IP address to access the server, the server will
use the IP address to compare with the bound SNI. Since the SSL certificate is
bound to the domain name, the corresponding resource cannot be found in the
SNI, so that the certificate will be verified. The authentication fails, and
the user cannot access the gateway via HTTPS + IP.
+
+You can implement this function by setting the `fallback_sni` parameter in the
configuration file and configuring the domain name. When the user uses HTTPS +
IP to access the gateway, when the SNI is empty, it will fall back to the
default SNI to achieve HTTPS + IP access to the gateway.
+
+```yaml title="./conf/config.yaml"
+apisix
+ ssl：
+ fallback_sni: "${your sni}"
+```
+
+## After enabling the SSL certificate, why can't the corresponding route be
accessed through HTTPS + IP?
+
+If you directly use HTTPS + IP address to access the server, the server will
use the IP address to compare with the bound SNI. Since the SSL certificate is
bound to the domain name, the corresponding resource cannot be found in the
SNI, so that the certificate will be verified. The authentication fails, and
the user cannot access the gateway via HTTPS + IP.
+
+You can implement this function by setting the `fallback_sni` parameter in the
configuration file and configuring the domain name. When the user uses HTTPS +
IP to access the gateway, when the SNI is empty, it will fall back to the
default SNI to achieve HTTPS + IP access to the gateway.
+
+```yaml title="./conf/config.yaml"
+apisix
+ ssl：
+ fallback_sni: "${your sni}"
+```
+
Review Comment:
```suggestion
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
