SSL Termination vs SSL Passthrough: balance between performance and easy management

<p class="wp-block-paragraph">Depending on management cost and user experience requirements, it might be more sensible to configure internal service as https or as http.</p> <p class="wp-block-paragraph">I give example of 2 backend exposing NodePort on Kubernetes, just to keep proxy concern clearly separated.</p> <h2 class="wp-block-heading"><strong>SSL Termination at the Proxy (HTTP Mode)</strong></h2> <h3 class="wp-block-heading"><strong>Concept</strong></h3> <h3 class="wp-block-heading"><strong>HAProxy Example (HTTP/2 […]

Read More…

ssh tunnel on https

How to expose ssh over https

<p class="wp-block-paragraph">By the mean of a reverse proxy installed on a Proxmox machine, is possible to expose also ssh access to the single machine.</p> <h2 class="wp-block-heading">List of ingredients</h2> <h2 class="wp-block-heading">Preparing <em>The Server</em></h2> <p class="wp-block-paragraph">To generate an self signed certificate, use the command:</p> <p class="wp-block-paragraph">In /etc/nginx/nginx.conf add these lines:</p> <h2 class="wp-block-heading">Preparing <em>The Client</em></h2> <p class="wp-block-paragraph">Copying minihost.crt […]

Read More…