[112717] in North American Network Operators' Group
Re: Anyone using any Linux SSL proxies?
daemon@ATHENA.MIT.EDU (Charles Wyble)
Sun Mar 15 01:20:36 2009
Date: Sat, 14 Mar 2009 22:20:22 -0700
From: Charles Wyble <charles@thewybles.com>
To: Valdis.Kletnieks@vt.edu
In-Reply-To: <43748.1237094252@turing-police.cc.vt.edu>
Cc: Nanog Mailing list <nanog@merit.edu>
Errors-To: nanog-bounces@nanog.org
Valdis.Kletnieks@vt.edu wrote:
> On Sat, 14 Mar 2009 21:56:26 PDT, Mike Lyon said:
>> Howdy,
>>
>> I am wondering what folks are recommending/using these days for Linux SSL
>> proxies? I need to build a linux box that basically acts as an SSL offloader
>> would (like a BigIP / Cisco ACE / Netscaler would do). Listen on port 443,
>> decrypt the SSL and then forward the request onto the webserver on port 80.
>
> How much traffic? That would be a major consideration....
Check out http://www.apsis.ch/pound/
It would appear the magic search term on google is linux reverse ssl
proxy .... I started searching for linux ssl proxy. That turned up a lot
of stuff for wrapping plain text in encryption, not the other way
around. :)
And yes how much traffic is a major consideration. If a lot, then you
would want to utilize an accelerator card supported by openssl.