Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SSL and Host support for streams #1829

Open
simqui opened this issue Feb 3, 2022 · 17 comments
Open

Add SSL and Host support for streams #1829

simqui opened this issue Feb 3, 2022 · 17 comments

Comments

@simqui
Copy link

simqui commented Feb 3, 2022

Is your feature request related to a problem? Please describe.

If i want to ex:
Add a host stream for TCP with SSL support to proxy DoT( Dns-over-TLS) this is not possible right now.

This requires modules: ngx_stream_map_module and ngx_stream_ssl_preread_module
to be implemented.

Also a feature in the WebUI to be able to add streams with SSL and host support.

Describe the solution you'd like

Add the ability to use hosts redirect and SSL with a TCP stream proxy.

Include these modules in proxy manager:
https://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html
https://nginx.org/en/docs/stream/ngx_stream_map_module.html

Describe alternatives you've considered

Only alternative is to forward TCP 853 directly via streams, not using host or ssl.

Additional context

These modules are needed for this to work and does need to be implemented.

https://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html
https://nginx.org/en/docs/stream/ngx_stream_map_module.html

@HellStorm666
Copy link

Any timeline on this idea to be implemented?

@razza-guhl
Copy link

+1
Want to stream DoT with SSL termination on Nginx Proxy Manager

@kkoenen
Copy link

kkoenen commented Jan 16, 2023

+1

Forwarding a specific port towards a backend server now is only possible without SSL (using stream).

@cybershoe
Copy link

+1. Want to terminate TLS for MQTT at the perimeter with mTLS to keep unauthenticated traffic away from the origin servers.

@lesca
Copy link

lesca commented Mar 9, 2023

+1 SSL is everywhere. Please add support.

@mariusberget92
Copy link

+1. :)

@unnikked
Copy link

unnikked commented Jul 2, 2023

+1

1 similar comment
@m0d3rnX
Copy link

m0d3rnX commented Oct 7, 2023

+1

@scharez
Copy link

scharez commented Oct 30, 2023

Any updates? :)

@sdwillbrand
Copy link

+1

@kantmn
Copy link

kantmn commented Dec 10, 2023

+1
would love to use this for setup with DoT support

@scharez
Copy link

scharez commented Jan 24, 2024

Is that feature already planned?

@sorcerb
Copy link

sorcerb commented Feb 28, 2024

Just installed this to try, and I can't use stream with SSL for rabbitMq.
I see that people are waiting and after 2 years, I will look for a another product...

@gadget78
Copy link

gadget78 commented Apr 6, 2024

can this not be added, by simply adding a custom stream .conf ..

like pointed out in this comment ?
#3628

@sorcerb
Copy link

sorcerb commented Apr 7, 2024

Yes, but for example 0xJacky/nginx-ui have stream custom conf from UI out of box. I use it for my server.
I think this functionality will also be great to have in this project.

@XtremeOwnageDotCom
Copy link

Bump.

@braian87b
Copy link

#3789

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests