Hi there folks,
I would like to ask if Universal Forwarder can support Server Name Indication (SNI)? That is extension of TLS protocol which can be used by nginx to deploy SNI-based-routing from UF`s to multiple hosts.
INFO:
- We have many clients with on-premise machines/laptops with Universal Forwarders sending traffic to our AWS Splunk Instances (Indexers). Our AWS Instances doesn`t have public IPv4 addresses and we would like to deploy single point of contact (nginx) with public IPv4 address for all TCP UF`s traffic which then differentiate by destination.
UF -> nginx with public IPv4 (SNI based-routing) -> AWS Target Indexer
Pre-requisites:
We need UF with enabled SSL - this is completed.
We need UF with enabled SNI (Its needed to differentiate destination hosts)
e.g. UF`s will send traffic to:
client1.mydomain.com
client2.mydomain.com
Nginx will then route the traffic to destination.
Have someone tried similar approach before? Also if you could give other suggestion for our solution will be much appreciated!
Thank you.
Kind Regards,
Tihomir Stoyanov
↧