You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2020/05/25 10:12:57 UTC
[GitHub] [pulsar] rdhabalia opened a new pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
rdhabalia opened a new pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566
### Motivation
Implementation of [PIP-60](https://github.com/apache/pulsar/wiki/PIP-60:-Support-Proxy-server-with-SNI-routing)
A proxy server is a go‑between or intermediary server that forwards requests from multiple clients to different servers across the Internet. The proxy server can act as a “traffic cop,” in both forward and reverse proxy scenarios, and adds various benefits in your system such as load balancing, performance, security, auto-scaling, etc.. There are already many proxy servers already available in the market which are fast, scalable and more importantly covers various essential security aspects that are needed by the large organization to securely share their confidential data over the network. Pulsar already provides proxy implementation PIP-1 which acts as a reverse proxy and creates a gateway in front of brokers. However, pulsar doesn’t provide support to use other proxies such as Apache traffic server (ATS), HAProxy, Nginx, Envoy those are more scalable and secured. Most of these proxy-servers support SNI ROUTING which can route traffic to a destination without having to terminate the SSL connection. Routing at layer 4 gives greater transparency because the outbound connection is determined by examining the destination address in the client TCP packets.
[Netty supports sending SNI header on TLS handshake](https://github.com/netty/netty/issues/3801#issuecomment-104274440) and this PR uses that Netty feature to send SNI header while connecting to proxy.
### Modification
https://github.com/apache/pulsar/wiki/PIP-60:-Support-Proxy-server-with-SNI-routing#changes
**Note:** we have fully tested this changes with ATS proxy for both forward and reverse proxy scenarios. And I have also shared e2e example in PIP to use ATS proxy for client and broker integration.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codelipenghui merged pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
codelipenghui merged pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] rdhabalia removed a comment on pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
rdhabalia removed a comment on pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-632973342
/pulsarbot run-failure-checks
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] rdhabalia commented on pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
rdhabalia commented on pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-631139098
yes, I will rebase it soon.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codelipenghui commented on pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
codelipenghui commented on pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-630809011
@rdhabalia could you please rebase this branch.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codelipenghui closed pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
codelipenghui closed pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] sijie commented on issue #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
sijie commented on issue #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-617389072
/pulsarbot run-failure-checks
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] sijie commented on pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
sijie commented on pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-630484448
@rdhabalia Can you rebase this pull request?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] sijie commented on pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
sijie commented on pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-633846180
/pulsarbot run-failure-checks
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codelipenghui commented on pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
codelipenghui commented on pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-637498163
/pulsarbot run-failure-checks
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] rdhabalia commented on pull request #6566: [PIP-60] [Proxy-Server] Support SNI routing to support various proxy-server in pulsar
Posted by GitBox <gi...@apache.org>.
rdhabalia commented on pull request #6566:
URL: https://github.com/apache/pulsar/pull/6566#issuecomment-632973342
/pulsarbot run-failure-checks
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org