Post #2019986
2026-05-02 20:45 UTC
@patrick This would replace a bunch of NGINX in my network that are just plain reverse proxies, although it sounds like it would require the backend to also terminate TLS and some of my devices can't do that.
Replies (1)
-
@patrick@retro.social 2026-05-02 21:04
@kevin Correct, the backend has to terminate TLS for this to work. I'm wondering if I want to implement management of optional HAPROXY protocol (like tlsrouter) and TLS (like slt) termination that would have to lean in on the userspace side forwarding (that already exists but only as a fallback to cover weird edge cases that is rarely exercised), but it definitely wouldn't be in the first release(s).