support stream tls termination protocol detection

[xqdoo00o@…]

In haproxy I could use if HTTP after tls termination , but in nginx after stream tls termination, there is no Embedded Variables to show if it's http protocol.

haproxy:

defaults mode tcp frontend tls-in bind *:443 tfo ssl crt /etc/ssl/private/aa.aa.pem tcp-request content accept if HTTP // how nginx could route request just like below ?? use_backend httpback if HTTP default_backend customback 

nginx:

stream { upstream customback{ server 127.0.0.1:8888; } upstream httpback{ server 127.0.0.1:9999; } server { listen 443 ssl; //how to figure if it's http req. proxy_pass httpback; ssl_certificate /etc/cert/fullchain.cer; ssl_certificate_key /etc/cert/aa.aa.key; } } 

[xeioex]

Hi xqdoo00o,
You may try stream js module (​http://nginx.org/en/docs/stream/ngx_stream_js_module.html).

nginx.conf:

js_include stream.js; js_set $upstream upstream; server { ... js_preread preread; proxy_pass $upstream; } 

stream.js:

var is_http = 0; function preread(s) { s.on('upload', function (data, flags) { var n = data.indexOf('\r\n'); if (n != -1 && data.substr(0, n - 1).endsWith("HTTP/1.")) { is_http = 1; } if (data.length || flags.last) { s.done(); } }); } function upstream(s) { return is_http ? "httpback" : "customback"; } 

[xqdoo00o@…]

it does work,thanks!

[Maxim Dounin]

Given that this is something that can be done using njs, and it is unclear if there is a strong demand for this feature to consider implementing this natively, closing this for now.