What is the best approach for having nginx in a web farm type setup
where I
want to forward http connections to an proxy upstream if they match one
of
a very long/highly dynamic list of host names? All of the host names we
are
interested in will resolve to our address space, so could it be as
simple
as defining a resolver and having an allow for our CIDR’s? Or do I need
something more elaborate like a database of allowed hostnames?
A related question might be, whats that best approach if I wanted to
throw
TLS into the mix? Would I need to keep SSL certs for each of my very
long/highly dynamic list of hosts resident? Or is there a way to manage
that more dynamically? Assume that everyone connecting supports SNI.
In both cases I’m just looking for high level/best practices. I can work
out the details but want to make sure I’m going the right direction and
asking the right questions.