MeshCentral icon indicating copy to clipboard operation
MeshCentral copied to clipboard

[Feature Request] Enable multiple certURLs

Open PrplHaz4 opened this issue 2 years ago • 14 comments

Enable multiple certURLs to allow automatic configuration for split-horizon dns or multiple tls proxies in front of meshcentral.

This would resolve numerous outstanding issues related to CloudFlare connectivity. Most recently (?), https://github.com/Ylianst/MeshCentral/issues/3580

Simple use case:

  • Clients outside network go through CloudFlare Proxy
  • Clients inside network go through internal reverse Proxy

This would allow internet-facing clients to connect and be aware of only the CF proxy, while internal clients can connect directly to your internal reverse proxy.

There may be a more elegant solution to this problem, but it seems common enough, and IMO allowing meshcentral to hide behind CF is a great way to mitigate the risk of exposing a service like this to the public internet.

Keep up the great work - you guys really deliver a truly remarkable OSS product!

PrplHaz4 avatar Mar 24 '22 21:03 PrplHaz4