Post #2019984

@patrick I'm happy to see another SNI middlebox! I like the concept; I wrote about the advantages a few years ago: https://jamey.thesharps.us/2020/04/24/most-general-reverse-proxy/ How are you using eBPF to make the client address visible to the backend? I had looked into that but it seemed like the best I could do was passing SKBs from one socket to another, which I thought wouldn't carry the remote address info along. I also considered using Unix socket file descriptor-passing, but then needed some way to peek at the initial part of the stream without consuming it, and also would have needed to modify backends to get incoming sockets that way instead of by calling accept. So I'd love to hear how you apparently got the best of all worlds!