SSL Termination vs SSL Passthrough: balance between performance and easy management

Depending on management cost and user experience requirements, it might be more sensible to configure internal service as https or as http. I give example of 2 backend exposing NodePort on Kubernetes, just to keep proxy concern clearly separated. SSL Termination at the Proxy (HTTP Mode) Concept HAProxy Example (HTTP/2 Termination) Notes: NGINX Example (HTTP/2 […]

Read More…

ssh tunnel on https

How to expose ssh over https

By the mean of a reverse proxy installed on a Proxmox machine, is possible to expose also ssh access to the single machine. List of ingredients Preparing The Server To generate an self signed certificate, use the command: In /etc/nginx/nginx.conf add these lines: Preparing The Client Copying minihost.crt in The Client from The Server by: […]

Read More…