SSL Pass-Through in Nginx Reverse proxy?

后端 未结 1 1357
生来不讨喜
生来不讨喜 2020-12-01 15:00

Is it possible to use Nginx reverse proxy with SSL Pass-through so that it can pass request to a server who require certificate authentication for client.

It means s

1条回答
  •  离开以前
    2020-12-01 15:38

    Not sure how much it can work in your situation, but newer (1.9.3+) versions of Nginx can pass (encrypted) TLS packets directly to an upstream server, using the stream block :

    stream {
      server {
        listen     443;
        proxy_pass backend.example.com:443;
      }
    }
    

    If you want to target multiple upstream servers, distinguished by their hostnames, this is possible by using the nginx modules ngx_stream_ssl_preread and ngx_stream_map. The concept behind this is TLS Server Name Indication. Dave T. outlines a solution nicely. See his answer on this network.

    0 讨论(0)
提交回复
热议问题