Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/servers/puppet/modules/humbug/files/nginx/humbug-include/loadbalancer

3 lines
76 B
Plaintext
Raw Normal View History

Puppet configuration and associated nginx files for lb0.zulip.net. lb0.zulip.net will proxy connections to the relevant backend servers. Depressingly, SSL certificate verification of the backend servers is not performed at this time, see: <http://trac.nginx.org/nginx/ticket/13> The above-mentioned bug has existed since 2011, but a CVE was not allocated until January. The nginx developers don't seem to care. Sigh. In any case, this is of somewhat limited impact at Humbug, since we can have reasonable confidence that communications within AWS are not subject to active MITMs. Passive MITM is not a concern, because the traffic *is* in fact encrypted. (imported from commit c96e1235fc17192c7452e0417a1309cfcda62de2)
2013-07-14 05:58:46 +02:00
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;