Feature consideration: SSL via HAProxy's "Proxy" protocol and Stunnel

Jesper Mortensen j73mor at gmail.com
Sun Feb 20 15:24:20 CET 2011


Dear all,

Have you guys seen HAProxy's "Proxy Protocol"? The gist of it is a
patch for Stunnel 4.33 and smaller change to HAProxy. Used together
these permit flexible SSL handling with HAProxy.

http://haproxy.1wt.eu/download/1.5/doc/proxy-protocol.txt
http://haproxy.1wt.eu/
(paragraph below heading "Quick News" - "Nov 11th, 2010")

I'm no expert, but this seems to be a very low-friction way of adding
good SSL support, and should be applicable to Varnish as well? SSL
support is on the post-2.1 roadmap; is the above helpful in
prioritizing this feature?  :-)

Thanks,


-- 
Best Regards,

Jesper Mortensen



More information about the varnish-misc mailing list