# HG changeset patch
# User Yaroslav Zhuravlev <yar@nginx.com>
# Date 1531420825 -10800
# Node ID da8e5d713962a95ec50d7b5f62937482e25ef0ab
# Parent  f9f4d8e070dcde5629504254bcee0a079243f0a8
Documented the $ssl_preread_protocol variable.

diff --git a/xml/en/docs/stream/ngx_stream_ssl_preread_module.xml b/xml/en/docs/stream/ngx_stream_ssl_preread_module.xml
--- a/xml/en/docs/stream/ngx_stream_ssl_preread_module.xml
+++ b/xml/en/docs/stream/ngx_stream_ssl_preread_module.xml
@@ -9,7 +9,7 @@
 <module name="Module ngx_stream_ssl_preread_module"
         link="/en/docs/stream/ngx_stream_ssl_preread_module.html"
         lang="en"
-        rev="2">
+        rev="3">
 
 <section id="summary">
 
@@ -73,7 +73,25 @@ server {
     ssl_preread on;
 }
 </example>
+</para>
 
+
+<para>
+Selecting an upstream based on SSL protocol version:
+<example>
+map $ssl_preread_protocol $upstream {
+    ""        ssh.example.com:22;
+    "TLSv1.2" new.example.com:443;
+    default   tls.example.com:443;
+}
+
+# ssh and https on the same port
+server {
+    listen      192.168.0.1:443;
+    proxy_pass  $upstream;
+    ssl_preread on;
+}
+</example>
 </para>
 
 </section>
@@ -102,6 +120,11 @@ the <link doc="stream_processing.xml" id
 <para>
 <list type="tag">
 
+<tag-name id="var_ssl_preread_protocol"><var>$ssl_preread_protocol</var></tag-name>
+<tag-desc>
+the highest SSL protocol version supported by the client (1.15.2)
+</tag-desc>
+
 <tag-name id="var_ssl_preread_server_name"><var>$ssl_preread_server_name</var></tag-name>
 <tag-desc>
 server name requested through SNI
diff --git a/xml/ru/docs/stream/ngx_stream_ssl_preread_module.xml b/xml/ru/docs/stream/ngx_stream_ssl_preread_module.xml
--- a/xml/ru/docs/stream/ngx_stream_ssl_preread_module.xml
+++ b/xml/ru/docs/stream/ngx_stream_ssl_preread_module.xml
@@ -9,7 +9,7 @@
 <module name="Модуль ngx_stream_ssl_preread_module"
         link="/ru/docs/stream/ngx_stream_ssl_preread_module.html"
         lang="ru"
-        rev="2">
+        rev="3">
 
 <section id="summary">
 
@@ -73,7 +73,24 @@ server {
     ssl_preread on;
 }
 </example>
+</para>
 
+<para>
+Выбор сервера по версии протокола SSL:
+<example>
+map $ssl_preread_protocol $upstream {
+    ""        ssh.example.com:22;
+    "TLSv1.2" new.example.com:443;
+    default   tls.example.com:443;
+}
+
+# ssh и https на одном порту
+server {
+    listen      192.168.0.1:443;
+    proxy_pass  $upstream;
+    ssl_preread on;
+}
+</example>
 </para>
 
 </section>
@@ -102,6 +119,11 @@ server {
 <para>
 <list type="tag">
 
+<tag-name id="var_ssl_preread_protocol"><var>$ssl_preread_protocol</var></tag-name>
+<tag-desc>
+максимальная версия протокола SSL, поддерживаемая клиентом (1.15.2)
+</tag-desc>
+
 <tag-name id="var_ssl_preread_server_name"><var>$ssl_preread_server_name</var></tag-name>
 <tag-desc>
 имя сервера, запрошенное через SNI