When defining check entries in a backend, is it possible to provide SNI
information to the http client within haproxy so that backend Apache
webservers that support SNI can be used, and have the check request
directed to the correct virtualhost?

I saw something that said SNI checks are not as reliable as Host header
checks.  I already know how to provide the Host header on a check URL.
Is the Host header enough?  I am not validating certificates when making
backend SSL connections.

Related question: Does haproxy transfer SNI information (when present)
from the client request to the backend request when both are using SSL
and the backend server supports it?

Thanks,
Shawn


Reply via email to