# Pass https requests to backend servers

**URL:** <https://www.ruby-forum.com/t/pass-https-requests-to-backend-servers/191629>\
**Category:** NGINX\
**Created:** [July 15, 2010, 4:08pm UTC](https://www.ruby-forum.com/t/pass-https-requests-to-backend-servers/191629 "2010-07-15T16:08:11Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sjaak\_P](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/fbc32d/32.png) [@Sjaak\_P](https://www.ruby-forum.com/u/Sjaak_P)\
**Post date:** [July 15, 2010, 4:08pm UTC](https://www.ruby-forum.com/t/pass-https-requests-to-backend-servers/191629/1 "2010-07-15T16:08:11Z")

</div>

Hello,  
here at our company we are setting up an nginx loadbalancer before a  
couple  
of webservers(2 tomcat/ 2 iis).

The problem that we walk in to is that we want to do the ssl handling on  
the  
backend servers.  
we know how to do it on the nginx server but is it possible for nginx to  
pass trough all the ssl requests to the backend without handling itself?

Hope you can help.  
grt Peter  
(apologize for the bad English)

---

<div class="post-metadata">

**Author:** ![Sjaak\_P](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/fbc32d/32.png) [@Sjaak\_P](https://www.ruby-forum.com/u/Sjaak_P)\
**Post date:** [July 15, 2010, 4:52pm UTC](https://www.ruby-forum.com/t/pass-https-requests-to-backend-servers/191629/2 "2010-07-15T16:52:41Z")

</div>

Dear Sjaak,

On Don 15.07.2010 16:07, Sjaak P. wrote:

> Hello,  
> here at our company we are setting up an nginx loadbalancer before a  
> couple of webservers(2 tomcat/ 2 iis).
> 
> The problem that we walk in to is that we want to do the ssl handling  
> on the backend servers.  
> we know how to do it on the nginx server but is it possible for nginx  
> to pass trough all the ssl requests to the backend without handling  
> itself?

Afaik no.

You will need some tcp loadbalancer (=haproxy) for this.

You can talk with the backend https if you want to encrypt the  
communication between frontend and backend.

proxy\_pass https://…

Hth

Aleks

---

<div class="post-metadata">

**Author:** ![Sjaak\_P](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/fbc32d/32.png) [@Sjaak\_P](https://www.ruby-forum.com/u/Sjaak_P)\
**Post date:** [July 15, 2010, 5:12pm UTC](https://www.ruby-forum.com/t/pass-https-requests-to-backend-servers/191629/3 "2010-07-15T17:12:35Z")

</div>

Hey Aleks,  
it’s to bad that it is not possible.

but when the traffic between the LB en backend is also encrypted is’nt  
it a  
double burden for the LB server?

2010/7/15 Aleksandar L. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)

---

<div class="post-metadata">

**Author:** ![Sjaak\_P](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/fbc32d/32.png) [@Sjaak\_P](https://www.ruby-forum.com/u/Sjaak_P)\
**Post date:** [July 15, 2010, 5:46pm UTC](https://www.ruby-forum.com/t/pass-https-requests-to-backend-servers/191629/4 "2010-07-15T17:46:33Z")

</div>

Hi,

> The problem that we walk in to is that we want to do the ssl handling on  
> the  
> backend servers.  
> we know how to do it on the nginx server but is it possible for nginx to  
> pass trough all the ssl requests to the backend without handling itself?

You might try using nginx\_tcp\_proxy\_module [1]. It seems that it should  
be  
able to handle such scenario, but to be honest I never used it, so you  
must  
verify this for yourself.

[1] [GitHub - yaoweibin/nginx\_tcp\_proxy\_module: add the feature of tcp proxy with nginx, with health check and status monitor · GitHub](http://github.com/yaoweibin/nginx_tcp_proxy_module)

Best regards,  
Piotr S. \< [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) \>

---

<div class="post-metadata">

**Author:** ![Sjaak\_P](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/fbc32d/32.png) [@Sjaak\_P](https://www.ruby-forum.com/u/Sjaak_P)\
**Post date:** [July 16, 2010, 9:13am UTC](https://www.ruby-forum.com/t/pass-https-requests-to-backend-servers/191629/5 "2010-07-16T09:13:51Z")

</div>

Hi Sjaak,

On Don 15.07.2010 17:11, Sjaak P. wrote:

> Hey Aleks,  
> it’s to bad that it is not possible.
> 
> but when the traffic between the LB en backend is also encrypted is’nt  
> it a double burden for the LB server?

Yes.

> > > 
> > 
> > nginx mailing list  
> > [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> > [mailman.nginx.org archive](http://nginx.org/mailman/listinfo/nginx)