How not to design a wire protocol

Daniel Franke dfoxfranke at gmail.com
Tue Mar 5 21:29:54 UTC 2019


On Tue, Mar 5, 2019 at 4:10 PM Hal Murray <hmurray at megapathdsl.net> wrote:
> How does that work in practice?  443 is for HTTPS.  Does Apache have a call
> out mode?  Is there a standard utility that does ALPN dispatching?  What
> fraction of clients send ALPN info?

I've never tried it myself, but I think Nginx can handle this. Use
ngx_stream_ssl_preread_module to check ALPN, then based on what's
there either terminate TLS locally or forward traffic at the TCP layer
to some other port on ::1. AFAIK Apache users are SOL though.


More information about the devel mailing list