Re: Force SSL redirection to target service host for all protocols

2020-07-15 Thread siva.pannier
Thanks Francis! I was able to resolve that after a creating a Keystore jks with my cert & key and pointing my java code to that store using the system property, after that added keystore manager to the SSL context. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288541,288716#msg-28871

Re: Force SSL redirection to target service host for all protocols

2020-07-14 Thread siva.pannier
Extremely sorry, I mentioned the wrong port in that post.. Actually I am using the correct port number.. Client (Windows + non SSL):8091 ==> Nginx host (ubuntu vm+ SSL redirection) ==> TCP server (Windows + SSL enabled) TCP server listening on 8091 Nginx Server listening on 8091 Client makes ca

Re: Force SSL redirection to target service host for all protocols

2020-07-13 Thread siva.pannier
Hi there, I have tried doing TCP redirection to a backend TCP server with SSL enabled following the below URL. https://docs.nginx.com/nginx/admin-guide/security-controls/securing-tcp-traffic-upstream/ My TCP (non-ssl) client is able to hit the TCP Server (SSL enabled) via the Nginx (proxy_ssl) b

Re: Force SSL redirection to target service host for all protocols

2020-07-10 Thread siva.pannier
Hi.. > An you want your clients to talk to nginx without encryption, and for > nginx to talk to upstream with encryption. Yup this is what I am trying to achieve. Started testing on these scenarios. Will you keep you all posted on the results. Posted at Nginx Forum: https://forum.nginx.org/rea

Re: SSL over UDP - Nginx as reverse proxy

2020-07-10 Thread siva.pannier
Thanks Francis.. I tried that DTLS patch on the version 1.15. It worked. It supported both the SSL & UDP directive on the same stream. I could do the SSL termination on Nginx with the Bouncy Castle Java API.. They should add it in the latest versions of Nginx as well. Posted at Nginx Forum: h

Re: Nginx as reverse proxy mail server host

2020-07-05 Thread siva.pannier
Thanks for your inputs.. let me try those.. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288532,288566#msg-288566 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Force SSL redirection to target service host for all protocols

2020-07-05 Thread siva.pannier
Can somebody please comment on this? Thanks, Siva Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288541,288565#msg-288565 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx pre-configured test environment with all scenarios

2020-07-05 Thread siva.pannier
Appreciate your confidence on Nignx!! Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288558,288564#msg-288564 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx pre-configured test environment with all scenarios

2020-07-05 Thread siva.pannier
Yup thanks I mailed them today. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288558,288563#msg-288563 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Nginx pre-configured test environment with all scenarios

2020-07-05 Thread siva.pannier
Hi Team, I am assessing the capabilities and doing a POC on Nignx integration as reverse proxy. Are there any pre-configured image with all the protocols and the necessary clients to test and demo the capabilities of Nignx or Nignx plus? Doing a self-assessment with all the necessary setup on my l

SSL over UDP - Nginx as reverse proxy

2020-07-03 Thread siva.pannier
Hi, I would like to have SSL Termination on nginx for UDP connections. Can you please share the instructions on how to do achieve it? Thanks, Siva Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288543,288543#msg-288543 ___ nginx mailing li

Force SSL redirection to target service host for all protocols

2020-07-03 Thread siva.pannier
Hi, I want all my client applications make call to the service host via proxy. And the hosted services are TLSv1.2 enabled. Clients are not in a position to upgrade. Hence I want to enforce the SSL encryption when the call routed/redirected to the target from proxy. I have seen few blogs that tal

CORBA IIOP reverse proxy on nginx

2020-07-03 Thread siva.pannier
Hi, I would like to know whether nginx can work as a reverse proxy server for CORBA IIOP communication and also SSL on top of it. Please share if there are any blogs on that configuration. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288540,288540#msg-288540 __

Re: Nginx as reverse proxy mail server host

2020-07-03 Thread siva.pannier
Thank you for your suggestions! My understanding from your suggestions is that you do not want me to make any corrections on the client code. I just need to make corrections on the Nginx configuration as per the blog link. I am trying to understand that blog, going through again and again. so fa

Nginx as reverse proxy mail server host

2020-07-02 Thread siva.pannier
Hi, I am trying to proxy a SMTP server on Nginx using the below configuration. I want all the client calls to hit the SMTP server via my proxy host. I want the SSL termination on nginx for the client calls to the SMTP Server. When I do the connection getting below exception even before the SSL h

Re: Nginx as reverse proxy in Openshift Cluster

2020-06-30 Thread siva.pannier
Thank you so much for the guidance. I did the deployment of the below image via Openshift Console. As per the JSON, it should have picked the version 1.16. However it deployed the older verison 1.12. Not sure whats wrong here. "https://github.com/sclorg/nginx-ex"; Posted at Nginx Forum: https:/

Nginx as reverse proxy in Openshift Cluster

2020-06-29 Thread siva.pannier
Hi, I am new to Nginx and I could validate some of the reverse proxy scenarios in Windows and Ubuntu machine successfully. However I am facing challenges on validating them on Openshift cluster platform. I am new to Docker/Kubernetes/Openshift. I am able to deploy the below Nginx image in Openshi

Re: RE: TCP SSL termination issue on Nginx - for JDBC client

2020-06-22 Thread siva.pannier
Thanks a lot rr! for your suggestions.. my problem was solved.. I added the cipher suites as the one you gave.. props.setProperty("oracle.net.ssl_cipher_suites", "(TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA)"); Also imported the server certificat

Re: TCP SSL termination issue on Nginx - for JDBC client

2020-06-21 Thread siva.pannier
Hi.. Can someone pls guideme on this? Thanks.. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288400,288425#msg-288425 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: RE: RE: Nginx Opensource API feature?

2020-06-21 Thread siva.pannier
Thanks rr!! Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288402,288424#msg-288424 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: RE: Nginx Opensource API feature?

2020-06-19 Thread siva.pannier
Thanks for your inputs.. I will go through the APIs provided in the wiki/modules. Can Unit be used as a reverse proxy server like what we do with Nginx? I want to update my Nginx reverse proxy server dynamically (& automatically) without any downtime, whenever the underlying services scale up &

Nginx Opensource API feature?

2020-06-19 Thread siva.pannier
Hi.. I am looking for APIs on Nginx Opensource. To monitor, get status and dynamic configuration of nginx.conf files. Does the opensource version has it, please confirm? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288402,288402#msg-288402

TCP SSL termination issue on Nginx - for JDBC client

2020-06-19 Thread siva.pannier
Hi there, I am exploring the features of Nginx features and doing a POC with all the possible use cases. If all goes well, probably there would be a huge investment on the Nginx to use it our cloud based architecture. Currently exploring an option on TCP SSL termination on Nginx for a SSL connect