Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP][Docker] Add SSL proxy for being able to run using http/2 #257

Closed
wants to merge 3 commits into from

Conversation

andrerom
Copy link
Contributor

@andrerom andrerom commented Jan 29, 2018

In order to be able to do http/2 and server push testing with docker containers:

  • Adds a ssl proxy using nginx (and perl module to be able to set public port in env variable)
  • Adjusts Varnish vcl to be able to pass in port number from trusted proxy
  • Adjust app.php in oder to correctly translate the hostnames used by docker to actually trusted proxy ip's

Known issues:

  • Default self signed cert will show error in browser, there is no easy way around that, once proceeded it will be hidden until container is restarted. However does support mounting own cert

Todo:

  • Wait for incomming nginx release with server push support
  • Check with @vidarl where this is best placed, can also be separate yml file that would need to be appended to varnish or similar.

By default will generate a self signed certificate, however also supports mounting own trusted certificate.
@andrerom andrerom requested a review from vidarl January 29, 2018 15:34
@andrerom andrerom changed the base branch from master to 1.13 January 29, 2018 15:34
In order to get symfony to use the right docker port:
- make it possible to pass it from parent to Varnihs VCL in a trusted way
- make it possible to dynamicaly inject port to ssl proxy image (using pear module in this case)
@ezsystems ezsystems deleted a comment from ezrobot Jan 29, 2018
@andrerom andrerom changed the title [Docker] Add SSL proxy for being able to run using http/2 [WIP][Docker] Add SSL proxy for being able to run using http/2 Feb 14, 2018
@andrerom
Copy link
Contributor Author

On the part on configuring and matching proxies in VCL, see also: #93

@andrerom andrerom closed this Feb 7, 2020
@andrerom andrerom deleted the docker_ssl branch February 7, 2020 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

1 participant