Hacker News Reader

Right on!

I'm using nginx and thin, but I'm currently having to use varnish for proxying my websocket connections to thin because nginx can't do it. Then I have to use stunnel for ssl termination because varnish doesn't support it. I'll be able to cut both of those pieces of software out now.

View on HN

Why not just use haproxy?

It's been over a year since I had to set this up, but I used HAProxy in a similar setup and still needed stunnel.

In the whole of my DevOps career, getting SSL working with web sockets was one of the most frustrating.

HAProxy dev releases have had SSL support for the past 3-4 months.

http://blog.jeffzellner.com/work/2013/01/25/websockets--ssl-...

We are running 1.5 latest dev compiled with ssl here @basho. So far so good.

https://argv0.data.riakcs.net:8443/bailis_gosling.jpg

I second the success reports of HAProxy 1.5dev with SSL support. It's been stable for me over the last month, and more performant than using STunnel for SSL, which is what I'd been using for the last 1.5 years with Websockets. HAProxy is a remarkable, wicked fast, and very stable product.

Reply on news.ycombinator.com