Re: Compare against variable string in ACL

2017-05-08 Thread Tim Düsterhus
Holger, On 08.05.2017 11:37, Holger Just wrote: > We use basically this configuration snippet in production for quite some > years now and it works great. > while not exactly pretty, it definitely works fine. Thank you. Best regards Tim Düsterhus

Re: Compare against variable string in ACL

2017-05-08 Thread Holger Just
Hi Tim. Tim Düsterhus wrote: > I basically want an ACL that matches if 'hdr(host) == ssl_fc_sni' to use > programming language terminology. This is not directly possible right now using haproxy ACLs since they are only ablle to to compare a dynamic value (the fetch) to a static value. There is

Compare against variable string in ACL

2017-05-07 Thread Tim Düsterhus
Hi I want to make sure that the SNI hostname and the hostname provided in the 'Host' header of HTTP match, in order to avoid virtual host confusion within my backends. Is it possible to create such an ACL? I already tried someone like this: http-request set-var(txn.rheader) hdr(host) acl