Discuss mailing list

[max bellasys <info AT bellasys.com>]

Are you using Nginx in proxying your requests?

- Max

On Jun 8, 2015, at 9:48 PM, Julian De Marchi <julian AT jdcomputers.com.au> 
wrote:

> heya--
> 
> Ever since migrating to the new servers the nearest server plugin on the
> main site has not worked. After some heavy investigations we found the
> root cause to be the load-balancer in use. With the donated funds we
> purchased a linode nodebalancer.
> 
> The current issue is with the way this nodebalancer does SSL. The
> balancer can do the SSL termination itself, but it doesn't support SNI.
> Which means we choose only one site to SSL behind the LB and terminate
> the rest at the real host. So currently we're just passing TCP through,
> which means the REAL_IP gets dropped and replaced with that of the LB.
> Using HTTPS in the balancer means the header gets through.
> 
> The complications enter. We need to at a minimum SSL LB the wiki and the
> main site.
> 
> This is it for now on the progress. We're currently discussing methods
> to get around this. Just thought it'd be good to get an update "out there".
> 
> --julian
> 
> 
> --------
> You are a member of the OpenNIC Discuss list. 
> You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org