Aleh Buyevich olegbuevich

Proxy SSL Client Certificate through NGINX Load-Balancer

The frontend stream proxy_pass can be used for load-balancing without SSL off-loading. All SSL connections will be terminated on the backend and client certificate information can be properly authenticated.

This should be used in cases:

you have enough CPU to decrypt SSL on the backend servers
you require direct client AUTHENTICATION on the backend servers

	def ip2hex(cidr, router):
	addr, mask = cidr.split("/")
	mask = int(mask)
	addr = [("%2s" % hex(int(i))[2:]).replace(" ", "0") for i in addr.split(".") if i != "0"]
	parts = mask/8 - len(addr)
	if mask%8 > 0:
	parts += 1
	if parts > 0:
	for i in range(int(parts)):
	addr.append("00")

	def gettags = ("git ls-remote -t -h ssh://jenkins@<mygitpath>/repo/some.git feature/*").execute()

	return gettags.text.readLines()
	.collect { it.split()[1].replaceAll('refs/heads/', '') }
	.unique()
	.findAll { it.startsWith('<some more pattern>') }


	'''
	Generate DHCP Option 121 hex routing configurations

	Static routes pushed over DHCP

	1) Set option 121.
	2) Value is the concatenation of hex route data.
	3) Each route has the form:
	{prefix_length}{destination_prefix}{router}

	###########################################
	# IMPORTANT NOTE:
	#
	# As of asuswrt-merlin 380.67 Beta, you
	# can now configure SSL certificates from
	# the Webui, making these instructions
	# unnecessary.
	###########################################

	#!/usr/bin/env python
	#
	# cocoa_keypress_monitor.py
	# Copyright © 2016 Bjarte Johansen <Bjarte.Johansen@gmail.com>
	#
	# The MIT License (MIT)
	#
	# Permission is hereby granted, free of charge, to any person obtaining
	# a copy of this software and associated documentation files (the
	# “Software”), to deal in the Software without restriction, including

	Latency Comparison Numbers (~2012)
	----------------------------------
	L1 cache reference 0.5 ns
	Branch mispredict 5 ns
	L2 cache reference 7 ns 14x L1 cache
	Mutex lock/unlock 25 ns
	Main memory reference 100 ns 20x L2 cache, 200x L1 cache
	Compress 1K bytes with Zippy 3,000 ns 3 us
	Send 1K bytes over 1 Gbps network 10,000 ns 10 us
	Read 4K randomly from SSD* 150,000 ns 150 us ~1GB/sec SSD

Aleh Buyevich olegbuevich

Proxy SSL Client Certificate through NGINX Load-Balancer

Backend