/ Zope / Apsis / Pound Mailing List / Archive / 2007 / 2007-10 / Pound and Persistent SSL connections

[ << ] [ >> ]

[ pound log files to use with webalizer? / Matthias ... ] [ Sometimes apache cannot acquire X-Forwared-For. / ... ]

Pound and Persistent SSL connections
patrice aubry <paubry04(at)yahoo.com>
2007-10-24 20:36:03 [ FULL ]
Hello,

My question: Can Pound behave as a reverse SSL proxy with persistent
connections ?
 
By persistent, I mean that multiple request/response exchanges can take place
between a client and a server over a given connection.

Configuration:

Client <--> HTTP <--> Reverse SSL Proxy <-->  HTTPS (2-way)
<--> SSL Server 

Similarly,

Server <--> HTTP <--> Reverse SSL Proxy <-->  HTTPS (2-way)
<--> SSL Client 

Background:
I have attempted to use Apache as a reverse SSL proxy; it works great if and
only you don't need persistent connections. I've  just found out that it's an
open bug. 
Concretely, the Server sees "Connection: close" in the HTTP Header for each
request from the client.
 

Thank you in advance,

Regards,
Patrice Aubry



 __________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com
Attachments:  
text.html text/html 1315 Bytes

Re: [Pound Mailing List] Pound and Persistent SSL connections
Dave Steinberg <dave(at)redterror.net>
2007-10-24 21:09:21 [ FULL ]
> By persistent, I mean that multiple request/response exchanges can[...]

I believe pound uses keep-alives when talking to backend servers.  I'd 
check the docs.

Pound does support a range of sticky-session methods: client IP, a 
header, a cookie, etc.  These persist a client's connection to a single 
backend.
[...]

Pound speaks HTTP to the backend, so if you want to do this, you need to 
use stunnel or something similar.  The more typical pound pattern is:

Client speaks HTTP/HTTPS <-> Pound speaks HTTP <-> backend servers

Good luck,[...]

MailBoxer