-
Recent Posts
Archives
- May 2019
- January 2019
- November 2017
- July 2017
- March 2017
- August 2016
- May 2015
- January 2015
- October 2014
- June 2014
- December 2013
- September 2013
- August 2013
- July 2013
- May 2013
- March 2013
- February 2013
- January 2013
- October 2012
- August 2012
- June 2012
- February 2012
- January 2011
- October 2010
- December 2009
- July 2009
- January 2009
- October 2008
Me on Twitter
- RT @PowerDNS_Bert: On this sad day where Mozilla has decided its US users should send all their DNS to @Cloudflare, two relevant links: * A… 1 month ago
- RT @FiloSottile: The arguments in defense of JWT are the same as PGP: ‣ it supports good crypto, too; ‣ it just needs an opinionated librar… 1 month ago
- RT @kvantfin: Over 100 påmeldte til seminaret vårt om to uker, og vi har booket en fjerde foredragsholder: Marcin Borratynski, Head of Quan… 2 months ago
- RT @ripencc: Today, at 15:35, we made our final /22 IPv4 allocation from the last remaining addresses in our available pool. We have now ru… 4 months ago
- RT @nj_dav: I've been doing a bit of research and testing on HTTP hop-by-hop headers and how abusing them may offer exploit potential https… 4 months ago
- RT @DasSurma: Incrementing variables in for-loops i++ - overused - nonsensical - imbalanced i-=-1 - hipster - expressive - symmetric 4 months ago
Tag Archives: ssl
Introducing hitch – a scalable TLS terminating proxy.
The last couple of weeks we’ve been pretty busy making SSL/TLS support for Varnish Cache Plus 4. Now that the news is out, I can follow up with some notes here. The setup will be a TLS terminating proxy in … Continue reading
PROXY protocol in Varnish
Dag has been working implementing support for HAProxy’s PROXY protocol[1] in Varnish. This is a protocol adds a small header on each incoming TCP connection that describes who the real client is, added by (for example) an SSL terminating process. … Continue reading
Setting client.ip in Varnish VCL with libvmod-ipcast
I’ve written a new Varnish 3.0 VMOD called ipcast. It has a single function; ipcast.clientip(ipstring) which sets the internal Varnish variable client.ip to whatever IPv4/IPv6 address you give as the argument. You need this if you want to do ACL checks … Continue reading
