-
Recent Posts
Archives
- September 2021
- May 2019
- January 2019
- November 2017
- July 2017
- March 2017
- August 2016
- May 2015
- January 2015
- October 2014
- June 2014
- December 2013
- September 2013
- August 2013
- July 2013
- May 2013
- March 2013
- February 2013
- January 2013
- October 2012
- August 2012
- June 2012
- February 2012
- January 2011
- October 2010
- December 2009
- July 2009
- January 2009
- October 2008
Me on Twitter
- IPv4 price forecasts for 2022-2023 lassekarstensen.wordpress.com/2021/09/08/ipv… 2 weeks ago
- RT @cryptopathe: GPRS (2G & 3G data) encryption schemes GEA-1 and GEA-2 have a security of 2^40 (due to a backdoor) and 2^45 (apparently un… 3 months ago
- RT @bcrypt: merry xss-mas! here’s one from chessbase.com that was fixed recently. send <script>if ($('.cbChatUserName')[0].innerT… 9 months ago
- RT @pancak3lullz: #BMW customer data up for sale @BMW @BMWUSA https://t.co/EJJQjhegQZ 1 year ago
- RT @haveibeenpwned: New breach: Foodora had 583k unique customers exposed in 2016. Data included names, delivery addresses, phone numbers a… 1 year ago
- RT @mrkoot: Apple paid $100k bounty for critical JWT impl. flaw in their "Sign in with Apple" authentication service: an attacker could per… 1 year ago
Tag Archives: ssl
Introducing hitch – a scalable TLS terminating proxy.
The last couple of weeks we’ve been pretty busy making SSL/TLS support for Varnish Cache Plus 4. Now that the news is out, I can follow up with some notes here. The setup will be a TLS terminating proxy in … Continue reading
PROXY protocol in Varnish
Dag has been working implementing support for HAProxy’s PROXY protocol[1] in Varnish. This is a protocol adds a small header on each incoming TCP connection that describes who the real client is, added by (for example) an SSL terminating process. … Continue reading
Setting client.ip in Varnish VCL with libvmod-ipcast
I’ve written a new Varnish 3.0 VMOD called ipcast. It has a single function; ipcast.clientip(ipstring) which sets the internal Varnish variable client.ip to whatever IPv4/IPv6 address you give as the argument. You need this if you want to do ACL checks … Continue reading
