29 Mar
2012
29 Mar
'12
11:08 a.m.
Marek Majkowski wrote:
If I may add my two cents, it's absolutely fine to just assume that `connect` can't be used in slave services. By doing otherwise you risk that stunnel may become another haproxy.
I don't think stunnel could ever compete with haproxy, as it's a transparent (protocol agnostic) proxy, while haproxy is a dedicated http proxy. On the other hand for some basic scenarios it might be better to use stunnel instead of haproxy even for http. I don't mind it. In fact I implemented server-mode SNI mostly for "connect" option. 8-) Greetings from Warsaw, Mike