Comment by perbu
7 days ago
the whole point of varnish software keeping a public version of "vinyl cache" as "varnish cache" with TLS is to give people a way to access a FOSS version with native TLS.
I think TLS is table-stakes now, and has been for the last 10 years, at least.
just use the tool that does the job.
TLS in -> hitch or caddy Cache -> varnish/vinyl TLS out -> haproxy
Connect them up with Unix sockets, if you like.
because the topic keeps coming up, I now wrote the tutorial which we should have had years ago: https://vinyl-cache.org/tutorials/tls_haproxy.html
Thanks for this. You dont mention hitch though. Is that now deprecated/discouraged?
It hasn't seen much action in a while, but maybe thats cos it works?
11 replies →
in my experience this has a lot more moving parts than it should.
Terminate tls and you have your cache.