apache / apisix

The Cloud-Native API Gateway
https://apisix.apache.org/blog/
Apache License 2.0
14.48k stars 2.52k forks source link

help request: https access apisix ssl error #11500

Open wzhlinux opened 2 months ago

wzhlinux commented 2 months ago

Description

When using nginx on the client side, calling the upstream node as apisix may cause handshake failure when using https

The current solution to the problem is to add proxy_stsl_derver.name on, but we have more than 2000 proxy domain names.

After capturing the package, it was found that the missing SNI information with the server name is suspected to be caused by apisix config ssl: radixtree_stni. Is there any way to solve this problem?

client nginx config: location ^~/FLY_PROXY/ { proxy_pass https://fly-front-api.gwm.cn/; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } Comparison of packet capture information image image

Environment

wzhlinux commented 2 months ago

Due to the large number of callers, it is not convenient to request the other party to add all parameters to solve the problem