SSL

Poul-Henning Kamp phk at phk.freebsd.dk
Mon Mar 14 09:14:51 CET 2011


In message <AANLkTiny7-wR9kfVWJ8-bh8NOAuQ=p1N+PHPQTKZss7H at mail.gmail.com>, Per 
Buer writes:

>Yes. If we use the patched stunnel version that haproxy also uses. It
>requires Varnish to understand the protocol however, as the address of the
>client is sent at the beginning of the conversation in binary form.

I would say  "Use a more intelligent SSL proxy" then...

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.




More information about the varnish-misc mailing list