wsky / top-link

embedded duplex multi-channel endpoint and connection management for c#/java/...
6 stars 1 forks source link

TLS/SSL support, ws://localhost:443 #92

Open wsky opened 9 years ago

wsky commented 9 years ago

easy use stunnel

http://www.cnblogs.com/wsky/archive/2011/04/06/2007095.html

http://blog.heidt.biz/blog/2012/07/19/ssl-websocket-proxy-with-stunnel-howto/

cert=stunnel.pem

sslVersion=all

output=stunnel.log

[https]
accept=443
connect=8000
;need patch http://level7systems.co.uk/en/stunnel-5-02-x-forwarded-for-patch/
;xforwardfor=yes
wsky commented 9 years ago

http://vincent.bernat.im/en/blog/2011-ssl-benchmark-round2.html

wsky commented 9 years ago

why new version of stunnel never support xforwardfor build-in http://mailing.unix.stunnel-users.narkive.com/u67juOIb/stunnel-users-when-x-forwarded-for-for-stunnel use "transparent" instead, see https://www.stunnel.org/static/stunnel.html

transparent = none | source | destination | both (Unix only)

or use nginx. https://github.com/yaoweibin/nginx_tcp_proxy_module/issues