Re: Issue with websocket behind nginx behind a haproxy SNI TLS reverse proxy

2016-11-24 Thread noci
the haproxy is conforming to the following setup: http://blog.haproxy.com/2012/04/13/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/ Look for: Choose a server using SNI: aka SSL routing No certificates available to haproxy, so no decoding and/or adding removing headers

Re: Issue with websocket behind nginx behind a haproxy SNI TLS reverse proxy

2016-11-24 Thread Maxim Dounin
Hello! On Wed, Nov 23, 2016 at 04:14:23AM -0500, noci wrote: > I have a strange problem. > > Setup: > Internet ---> haproxy (SNI TLS Routing) --> nginx (Webserver) --> Websocket > based server (WebRTC) > haproxy has no certificates, it checks the TLS Hello message for :443 > traffic and then fo