[prev in list] [next in list] [prev in thread] [next in thread] 

List:       stunnel-users
Subject:    [stunnel-users] STunnel v5.11 Multi SNI
From:       Scott McKeown <scott () loadbalancer ! org>
Date:       2015-03-18 11:36:32
Message-ID: CAFy58qFRtKqi_LK_Nmu6G=+B_O2rb74Craj5aASGKfwTrhkqew () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi Michal,

Thank you for the update and yes this does work but I feel that this is
incorrect.

Lets say that I have two domains
domain.com
newdomain.com

If I'm load balancing these domains to different backend servers this will
not work as it will always hit domain.com using this style of wildcard.

I think it should be:

sni = http:*.domain.com

This will then split out the domains, I know that the chance of this being
the case is low but I do believe that this should be how SNI is handled for
this type of case.


Regards,
Scott



-- 
With Kind Regards.

Scott McKeown
Loadbalancer.org
http://www.loadbalancer.org
Tel (UK) - +44 (0) 3303801064 (24x7)
Tel (US) - +1 888.867.9504 (Toll Free)(24x7)

[Attachment #5 (text/html)]

<div dir="ltr"><div>Hi Michal,</div><div><br></div><div>Thank you for the update and \
yes this does work but I feel that this is incorrect.</div><div><br></div><div>Lets \
say that I have two domains</div><div><a \
href="http://domain.com">domain.com</a></div><div><a \
href="http://newdomain.com">newdomain.com</a></div><div><br></div><div>If I&#39;m \
load balancing these domains to different backend servers this will not work as it \
will always hit <a href="http://domain.com">domain.com</a> using this style of \
wildcard.</div><div><br></div><div>I think it should be:</div><div><br></div><div>sni \
= http:*.<a href="http://domain.com">domain.com</a></div><div><br></div><div>This \
will then split out the domains, I know that the chance of this being the case is low \
but I do believe that this should be how SNI is handled for this type of \
case.</div><div><br></div><div><br></div><div>Regards,</div><div>Scott</div><div><br></div><br \
clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">With \
Kind Regards.<br><br>Scott McKeown<br>Loadbalancer.org<br><a \
href="http://www.loadbalancer.org" \
target="_blank">http://www.loadbalancer.org</a><br><div>Tel (UK) - +44 (<span \
style="font-family:arial;font-size:small">0) 3303801064 (24x7)</span></div><div><span \
style="font-family:arial;font-size:small">Tel (US) - +1 888.867.9504 (Toll \
Free)(24x7)</span></div></div></div> </div>


[Attachment #6 (text/plain)]

_______________________________________________
stunnel-users mailing list
stunnel-users@stunnel.org
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users


[prev in list] [next in list] [prev in thread] [next in thread]