janiussyafiq opened a new pull request, #13938: URL: https://github.com/apache/apisix/pull/13938
### Description `redis_ssl: true` never set the TLS SNI, so Redis behind a name-routed TLS front (a cloud endpoint on 443) got the default vhost and the plugin failed with `unknown prefix: "72"`. This builds on #13935 by @Arjen10 (`redis_server_name` option, SNI defaults to `redis_host`, SNI isolated in the keepalive pool) and adds: - skip the SNI when the host is an IP literal, otherwise `redis_ssl_verify: true` with an IP host starts failing on the hostname check (regression against 3.18.0) - `t/utils/redis-sni.t`: end-to-end tests against real TLS fronts, replacing the mocked `t/utils/redis.t` #### Which issue(s) this PR fixes: Fixes #13926 ### Checklist - [x] I have explained the need for this PR and the problem it solves - [x] I have explained the changes or the new features added to this PR - [x] I have added tests corresponding to this change - [x] I have updated the documentation to reflect this change - [x] I have verified that this change is backward compatible (If not, please discuss on the [APISIX mailing list](https://github.com/apache/apisix/tree/master#community) first) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
