[112717] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Anyone using any Linux SSL proxies?

daemon@ATHENA.MIT.EDU (Charles Wyble)
Sun Mar 15 01:20:36 2009

Date: Sat, 14 Mar 2009 22:20:22 -0700
From: Charles Wyble <charles@thewybles.com>
To: Valdis.Kletnieks@vt.edu
In-Reply-To: <43748.1237094252@turing-police.cc.vt.edu>
Cc: Nanog Mailing list <nanog@merit.edu>
Errors-To: nanog-bounces@nanog.org



Valdis.Kletnieks@vt.edu wrote:
> On Sat, 14 Mar 2009 21:56:26 PDT, Mike Lyon said:
>> Howdy,
>>
>> I am wondering what folks are recommending/using these days for Linux SSL
>> proxies? I need to build a linux box that basically acts as an SSL offloader
>> would (like a BigIP / Cisco ACE / Netscaler would do). Listen on port 443,
>> decrypt the SSL and then forward the request onto the webserver on port 80.
> 
> How much traffic?  That would be a major consideration....


Check out http://www.apsis.ch/pound/

It would appear the magic search term on google is linux reverse ssl 
proxy .... I started searching for linux ssl proxy. That turned up a lot 
of stuff for wrapping plain text in encryption, not the other way 
around. :)


And yes how much traffic is a major consideration. If a lot, then you 
would want to utilize an accelerator card supported by openssl.


home help back first fref pref prev next nref lref last post