Collaborate Disseminate
Consider the following network topology:
There are exactly two HTTPS servers, S1 and S2.
There are exactly two HTTPS clients, C1 and C2. Notice this, as there are often many more clients for two servers. But in this case,… Continue reading Correctly configuring load balancing for TLS session resumption
I am setting up HaProxy for https in passthrough (tcp) mode without SSL/TLS termination. I want to be able to route traffic to different backends based on hostname requested by a client.
From HaProxy documentation I learned that there is … Continue reading Do browsers and tools send `SNI` field by default connecting to https endpoints?
We have a privately hosted production system and an AWS machine we use for testing. Both systems have the same structure:
SSL termination with haproxy,
passing to an Apache server hosting a rails website,
plus a load of a… Continue reading Oracle (CVE-2016-2107) vulnerability on haproxy + Apache + (AWS vs private hosting)