Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: multiple certificates, sni based selection #1381

Merged
merged 3 commits into from May 2, 2023

Conversation

chauhanshubham
Copy link
Member

Adds documentation to test SNI based selection when multiple certificates are
provided in Gateway to terminate TLS traffic. The certificate to be served is chosen
based on the SNI in the client request. The doc adds a scenario and testing steps for the same.

Fixes #1275

Signed-off-by: Shubham Chauhan <shubham@tetrate.io>
@chauhanshubham
Copy link
Member Author

should we link to https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#certificate-selection for more details around certificate selection? or should we add it in our docs itself?

@chauhanshubham chauhanshubham marked this pull request as ready for review May 1, 2023 09:14
@chauhanshubham chauhanshubham requested a review from a team as a code owner May 1, 2023 09:14
@codecov
Copy link

codecov bot commented May 1, 2023

Codecov Report

Merging #1381 (8d3af84) into main (642a4d4) will decrease coverage by 0.11%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #1381      +/-   ##
==========================================
- Coverage   62.40%   62.30%   -0.11%     
==========================================
  Files          78       78              
  Lines       10953    10953              
==========================================
- Hits         6835     6824      -11     
- Misses       3667     3676       +9     
- Partials      451      453       +2     

see 2 files with indirect coverage changes

Signed-off-by: Shubham Chauhan <shubham@tetrate.io>
arkodg
arkodg previously approved these changes May 1, 2023
Copy link
Contributor

@arkodg arkodg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks for adding these docs !
added a minor comment

@arkodg
Copy link
Contributor

arkodg commented May 1, 2023

also can you copy over this file into docs/v0.4.0/user/secure-gateways.md as well

Signed-off-by: Shubham Chauhan <shubham@tetrate.io>
Copy link
Contributor

@arkodg arkodg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks !

@Xunzhuo Xunzhuo merged commit f998eac into envoyproxy:main May 2, 2023
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Pick TLS Cert based on SNI
3 participants