Skip to content

Commit

Permalink
docs(proxy) add more description text for SNI matcher in Route entity (
Browse files Browse the repository at this point in the history
…#1442)


Co-Authored-By: Guilherme Salazar <[email protected]>
  • Loading branch information
dndx and gszr committed Aug 12, 2019
1 parent 0c1c172 commit 38904b5
Showing 1 changed file with 11 additions and 1 deletion.
12 changes: 11 additions & 1 deletion app/1.3.x/proxy.md
Original file line number Diff line number Diff line change
Expand Up @@ -761,7 +761,17 @@ allows routing via SNIs:
Incoming requests with a matching hostname set in the TLS connection's SNI
extension would be routed to this Route. As mentioned, SNI routing applies not
only to TLS, but also to other protocols carried over TLS - such as HTTPS and
gRPCs.
If multiple SNIs are specified in the Route, any of them can match with the incoming request's SNI.
with the incoming request (OR relationship between the names).

The SNI is indicated at TLS handshake time and cannot be modified after the TLS connection has been established. This means, for example, that multiple requests reusing the same keepalive connection
will have the same SNI hostname while performing router match, regardless of the `Host` header.
has been established. This means keepalive connections that send multiple requests
will have the same SNI hostnames while performing router match
(regardless of the `Host` header).

Please note that creating a route with mismatched SNI and `Host` header matcher
is possible, but generally discouraged.

## Matching priorities

Expand Down

0 comments on commit 38904b5

Please sign in to comment.