fqdn value #4583
-
|
If you’re running httpproxy in your own cluster (not minikube or kind), what should the value of the fqdn value in the spec.virtualhost section be set to? And do you need a mapping for the fqdn in /etc/hosts? I am getting a "bad handshake" when I test the websocket over the httpproxy |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
The value needs to match with the FQDN that the client uses to reach the proxy. Only the client needs to be able to resolve the name to an IP address. It can be via I guess the reason for the error can be multiple things. Is the problem only happening for websocket or also for simple HTTPS requests? |
Beta Was this translation helpful? Give feedback.
The value needs to match with the FQDN that the client uses to reach the proxy. Only the client needs to be able to resolve the name to an IP address. It can be via
/etc/hostat client machine if DNS is not feasible. After establishing TCP connection the client may use the FQDN in two ways: (1) during TLS handshake by sending the server name in TLS SNI extension and (2) during HTTP request by sendingHostheader. These need to match with the name of the virtualhost.I guess the reason for the error can be multiple things. Is the problem only happening for websocket or also for simple HTTPS requests?