RE: what is the proper configuration for using send-proxy with SSL

2015-01-05 Thread Alex Wu
correvct for tcp mode. Alex > From: luky...@hotmail.com > To: alex_wu2...@hotmail.com; haproxy@formilux.org > Subject: RE: what is the proper configuration for using send-proxy with SSL > Date: Mon, 5 Jan 2015 20:08:31 +0100 > > > Hi Lucas, > > > > Thank you very much

RE: what is the proper configuration for using send-proxy with SSL

2015-01-05 Thread Lukas Tribus
> Hi Lucas, > > Thank you very much for assuring me that tcp mode is OK. I used ported > code to patch up the backend server to support this. > > Might you tell me at what step of SSL negotiation, that the line of > proxyprotocol is inserted, so I can debug the code a little bit? Before

RE: what is the proper configuration for using send-proxy with SSL

2015-01-05 Thread Alex Wu
uky...@hotmail.com > To: alex_wu2...@hotmail.com; haproxy@formilux.org > Subject: RE: what is the proper configuration for using send-proxy with SSL > Date: Mon, 5 Jan 2015 18:42:16 +0100 > > > > Thanks. > > > > It seems that haproxy needs to terminate ssl connection a

RE: what is the proper configuration for using send-proxy with SSL

2015-01-05 Thread Lukas Tribus
> Thanks. > > It seems that haproxy needs to terminate ssl connection and start > another ssl connecion to the backend to get it work. (HAProxy in HTTP > mode?) > > Using tcp mode of haproxy, it seems that SSL connction negotiation can > not be started. There is no need to. In TCP mo

RE: what is the proper configuration for using send-proxy with SSL

2015-01-05 Thread Alex Wu
ex_wu2...@hotmail.com; haproxy@formilux.org > Subject: RE: what is the proper configuration for using send-proxy with SSL > Date: Mon, 5 Jan 2015 18:18:59 +0100 > > Hi Alex, > > > > I have a website https://mytest.com. (faked for testing) I intend to > > use haproxy in

RE: what is the proper configuration for using send-proxy with SSL

2015-01-05 Thread Lukas Tribus
Hi Alex, > I have a website https://mytest.com. (faked for testing) I intend to > use haproxy in front of it with the option of send-proxy (using > proxyprotocol with ssl connection). The ideal case is that haproxy just > pass through the tcp packet without decoding it, and somehow the >