taskserver
taskserver copied to clipboard
RFC/RFT: implement taskserver behind SSL proxy
This patchset allows to put taskserver behind an SSL reverse proxy (eg. stunnel or haproxy). Original client's address is passed using PROXY protocol described at [1]. Both versions of the protocol are supported, though binary (v2) is preferred.
[1] http://www.haproxy.org/download/1.8/doc/proxy-protocol.txt
So this should explain why I was never able to put taskserver
behind traefik
, right?
Any reasons why this has not been merged yet??
So this should explain why I was never able to put
taskserver
behindtraefik
, right?Any reasons why this has not been merged yet??
taskd expects to be able to terminate the mTLS session itself. You might be able to passively proxy it but you can't frontload it I don't think, without this PR.