httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Tom Evans <>
Subject Re: [users@httpd] SNI with apache 2.4.1 reverse proxy
Date Mon, 16 Apr 2012 15:02:00 GMT
On Mon, Apr 16, 2012 at 3:47 PM, Michael Weiser
<> wrote:
> Hi there,
> On Mon, Apr 16, 2012 at 01:45:16PM +0200, Peter Sylvester wrote:
>> >> that makes mod_ssl put the content of the host header into the sni data
>> >> structures instead of the hostname from the URL used in the
>> >> ProxyPass(Reverse) configuration itself. This way even name-based
>> >> virtual hosts should work behind the reverse proxy.
>> > I haven't heard anything back: What's the general opinion on this?
>> - If a configuration parameter can be avoided, this divides
>>    the possibilities of errors by at least 3.
>>    I don't think that a configuration parameter is necessary.
> I agree (or at least don't care as long as I get the behaviour I need ;).
>> - If something is put into the SNI, it must be identical to
>>    what is in the Host:header.
> This could be a side-effect of ProxyPreserveHost On since only with
> ProxyPreserveHost On does it make any sense anyways. With
> ProxyPreserveHost Off, the SNI data should contain the hostname from the
> ProxyPassReverse directive.

Er, surely you mean "ProxyPass directive" here. The ProxyPassReverse
directive is only used for rewriting response headers, it has nothing
to do with altering the proxied request.



View raw message