Re: [squid-users] Reverse Proxy for Multiple SSL sites

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Thu, 20 Sep 2007 22:58:20 +0200

On tor, 2007-09-20 at 17:22 +0100, Jason.Fitzpatrick@leaseplanis.com
wrote:

> is it possible to have a squid proxy running as a reverse proxy on one IP
> Address but forwarding on requests to multiple backend web servers for
> HTTPS requests?

Yes, but only using a single certificate presented to the users.

So you need a multi-domain certificate to make clients happy if doing
this.

This is a SSL limitation, not so much a Squid limitation.. SSL is on the
ip:port level, before it's known which host the client requested.

All the options such as vhost etc is available in https_port as well,
even if the documentation mostly talks about a single site due to the
certificate limitations..

Regards
Henrik

Received on Thu Sep 20 2007 - 14:58:28 MDT

This archive was generated by hypermail pre-2.1.9 : Mon Oct 01 2007 - 12:00:02 MDT