Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add "https" request check type for ngx_http_upstream_check_module #1926

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

bluestn
Copy link

@bluestn bluestn commented Apr 8, 2024

In the current tengine implementation, there is ssl_hello check type which can do only do ssl handshake check.
With "https" check type I added, we can do full-featured https request check just like the "http" type.

We can add check_ssl_ciphers, check_ssl_protocols, check_ssl_server_name, check_ssl_verify, check_ssl_verify_depth, check_ssl_trusted_certificate, check_ssl_crl config instruction in upstream block of nginx.conf, and for the config instruction "check", we can use type="https" to enable the https check type.

The following is an config example:

    upstream backend {
            check type=http interval=3000 rise=2 fall=5 timeout=3000 port=443;
            check_http_send "GET / HTTP/1.1\r\nHost: www.test.com\r\n\r\n";
            check_http_expect_alive http_2xx http_3xx;
            check_ssl_server_name www.test.com;
            check_ssl_verify on;
            check_ssl_verify_depth 1;
            check_ssl_trusted_certificate ca.pem;
            server 111.22.33.44:443;
    }

PS:
check_http_send & check_http_expect_alive config instruction is reused from the "http" check type.

@CLAassistant
Copy link

CLAassistant commented Apr 8, 2024

CLA assistant check
All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants