varnish with ssl

Michael Fischer michael at dynamine.net
Thu Apr 8 01:11:42 CEST 2010


On Wed, Apr 7, 2010 at 2:30 PM, Poul-Henning Kamp <phk at phk.freebsd.dk> wrote:

>>(1) stunnel doesn't scale particularly well, and can't scale across
>>multiple CPUs in any event;
>
> There are other SSL proxies than stunnel.

I'm not aware of any that both do what stunnel does and is more
scalable.  Any examples?

>>Is GNU TLS any better? I've not used it.
>
> Not significantly, and furthermore, we try very hard to stay clear
> of GPL code, in order to not encumber Varnish with a multiple incompatible
> licenses.

It's LGPL, for the record.

--Michael



More information about the varnish-misc mailing list