Re: relayd ssl termination advice

2023-10-10 Thread Courtney
Oooo I wasn't familiar with sniproxy. I DO have a working haproxy configuration, and even though it is good software, I find myself barely understanding and was wanting something simpler. sniproxy looks to be exactly what I need :) I'm going to give this a try. Thank you for pointing this piece

Re: relayd ssl termination advice

2023-10-10 Thread Stuart Henderson
On 2023-10-10, Courtney wrote: > Maybe I am wrong, but I thought that relayd was not capable of doing > TLS pass through? That would be preferable if it is possible. If you do TLS passthrough (i.e. passing packets directly to the origin rather than doing "back to back" and terminating one TLS con

Re: relayd ssl termination advice

2023-10-09 Thread Courtney
Maybe I am wrong, but I thought that relayd was not capable of doing TLS pass through? That would be preferable if it is possible. Courtney On 10/9/23 00:42, Kapetanakis Giannis wrote: On 08/10/2023 04:00, Courtney wrote: Ultimately, I want to serve a handful of services on 80/443 that are ea

Re: relayd ssl termination advice

2023-10-09 Thread Kapetanakis Giannis
On 08/10/2023 04:00, Courtney wrote: > Ultimately, I want to serve a handful of services on 80/443 that are > easily accessible internally and externally, and I don't want to have > unencrypted traffic between relayd and my server for the services that > are passing sessions and such. Then don't

Re: relayd ssl termination advice

2023-10-08 Thread Bruno Flueckiger
On 08.10.2023 03:00, Courtney wrote: Hello everyone, I'm seeking an ideal way to make secure https connections to a handful of web servers in my house. Currently I have a Nextcloud server and a gitea server, but only the Nextcloud server is being port forwarded on 80/443. I want to make my gi

Re: relayd ssl termination advice

2023-10-07 Thread Steven Shockley
On 10/7/2023 9:00 PM, Courtney wrote: Hello everyone, I'm seeking an ideal way to make secure https connections to a handful of web servers in my house. I'm currently doing this with haproxy by having it inspect the SNI on the incoming traffic and route based on that. At the time I set it u

relayd ssl termination advice

2023-10-07 Thread Courtney
Hello everyone, I'm seeking an ideal way to make secure https connections to a handful of web servers in my house. Currently I have a Nextcloud server and a gitea server, but only the Nextcloud server is being port forwarded on 80/443. I want to make my gitea server publicly visible as well as a