TLS for a generic TCP session?

Server NGINX
1

Hey All,

I was looking over the feature differences between nginx and nginx-plus
and
its not clear to me if nginx by itself supports TLS termination for a
generic TCP session.

If it does not support TLS termination for TCP sessions, then are my
only
other options :

  1. building the mainline source with the following options to configure?
    or
  2. use nginx-plus download?

Could someone kindly clarify?

2

Hey All,

I was looking over the feature differences between nginx and nginx-plus
and
its not clear to me if nginx by itself supports TLS termination for a
generic TCP session.

If it does not support TLS termination for TCP sessions, then are my
only
other options :

  1. building the mainline source with the following options to configure?

./configure --sbin-path=/usr/local/nginx/nginx
–conf-path=/usr/local/nginx/bginx.conf
–pid-path=/usr/local/nginx/nginx.pid --with-pcre=…/pcre-8.38
–with-zlib=…/zlib-1.2.8 --with-http_ssl_module –with-stream
–with-mail=dynamic --with-openssl=/home/admin/iwan-30/openssl-1.0.2f/
–with-stream_ssl_module

or

  1. use nginx-plus download?

Could someone kindly clarify?

Thanks
Preety

3

Hi Preety,

On 5/19/16 2:57 AM, Preety Mordani wrote:

or

  1. use nginx-plus download?

Could someone kindly clarify?

There are no differences between -plus and -oss in this area – both
do support TLS termination in the stream module.

Yes, you are right, you need “–with-stream_ssl_module” configure flag.

You can find more information about our nginx-oss packages that we
build and ship here:

http://nginx.org/en/linux_packages.html#mainline

–
Maxim K.

4

Hi Maxim,

Thanks for your email. I will take a look.

Best,
Preety