Relegate lighttpd to only webserver work; replace Lighttpd proxy with HAproxy SNI #12
Loading…
Reference in New Issue
There is no content yet.
Delete Branch "%!s(<nil>)"
Deleting a branch is permanent. Although the deleted branch may exist for a short time before cleaning up, in most cases it CANNOT be undone. Continue?
Rather than doing proxy config and SSL termination in the webserver, we can use HAProxy to hand the connection all the way down to application. This will let us move off a wildcard certificate and rebuild our certbot automation.
https://www.haproxy.com/blog/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/
This issue has been resolved with moving to OpenResty.