Relegate lighttpd to only webserver work; replace Lighttpd proxy with HAproxy SNI #12

Closed
opened 2020-08-29 10:47:22 -05:00 by DarkFeather · 1 comment
Owner

Rather than doing proxy config and SSL termination in the webserver, we can use HAProxy to hand the connection all the way down to application. This will let us move off a wildcard certificate and rebuild our certbot automation.

https://www.haproxy.com/blog/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/

Rather than doing proxy config and SSL termination in the webserver, we can use HAProxy to hand the connection all the way down to application. This will let us move off a wildcard certificate and rebuild our certbot automation. https://www.haproxy.com/blog/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/
DarkFeather added the
On-hold
label 2020-11-05 15:30:26 -06:00
Author
Owner

This issue has been resolved with moving to OpenResty.

This issue has been resolved with moving to OpenResty.
Sign in to join this conversation.
No description provided.