Mercurial > hg > nginx-site
changeset 2210:da8e5d713962
Documented the $ssl_preread_protocol variable.
| author | Yaroslav Zhuravlev <yar@nginx.com> |
|---|---|
| date | Thu, 12 Jul 2018 21:40:25 +0300 |
| parents | f9f4d8e070dc |
| children | 660229c5c92f |
| files | xml/en/docs/stream/ngx_stream_ssl_preread_module.xml xml/ru/docs/stream/ngx_stream_ssl_preread_module.xml |
| diffstat | 2 files changed, 47 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/xml/en/docs/stream/ngx_stream_ssl_preread_module.xml +++ b/xml/en/docs/stream/ngx_stream_ssl_preread_module.xml @@ -9,7 +9,7 @@ <module name="Module ngx_stream_ssl_preread_module" link="/en/docs/stream/ngx_stream_ssl_preread_module.html" lang="en" - rev="2"> + rev="3"> <section id="summary"> @@ -73,7 +73,25 @@ server { ssl_preread on; } </example> +</para> + +<para> +Selecting an upstream based on SSL protocol version: +<example> +map $ssl_preread_protocol $upstream { + "" ssh.example.com:22; + "TLSv1.2" new.example.com:443; + default tls.example.com:443; +} + +# ssh and https on the same port +server { + listen 192.168.0.1:443; + proxy_pass $upstream; + ssl_preread on; +} +</example> </para> </section> @@ -102,6 +120,11 @@ the <link doc="stream_processing.xml" id <para> <list type="tag"> +<tag-name id="var_ssl_preread_protocol"><var>$ssl_preread_protocol</var></tag-name> +<tag-desc> +the highest SSL protocol version supported by the client (1.15.2) +</tag-desc> + <tag-name id="var_ssl_preread_server_name"><var>$ssl_preread_server_name</var></tag-name> <tag-desc> server name requested through SNI
--- a/xml/ru/docs/stream/ngx_stream_ssl_preread_module.xml +++ b/xml/ru/docs/stream/ngx_stream_ssl_preread_module.xml @@ -9,7 +9,7 @@ <module name="Модуль ngx_stream_ssl_preread_module" link="/ru/docs/stream/ngx_stream_ssl_preread_module.html" lang="ru" - rev="2"> + rev="3"> <section id="summary"> @@ -73,7 +73,24 @@ server { ssl_preread on; } </example> +</para> +<para> +Выбор сервера по версии протокола SSL: +<example> +map $ssl_preread_protocol $upstream { + "" ssh.example.com:22; + "TLSv1.2" new.example.com:443; + default tls.example.com:443; +} + +# ssh и https на одном порту +server { + listen 192.168.0.1:443; + proxy_pass $upstream; + ssl_preread on; +} +</example> </para> </section> @@ -102,6 +119,11 @@ server { <para> <list type="tag"> +<tag-name id="var_ssl_preread_protocol"><var>$ssl_preread_protocol</var></tag-name> +<tag-desc> +максимальная версия протокола SSL, поддерживаемая клиентом (1.15.2) +</tag-desc> + <tag-name id="var_ssl_preread_server_name"><var>$ssl_preread_server_name</var></tag-name> <tag-desc> имя сервера, запрошенное через SNI