| # sni.yaml |
| # |
| # This configuration file |
| # - sets the SSL actions to be performed based on the servername provided during SSL handhshake phase (SNI extension) |
| # - sets the SSL properties required to make SSL connection with the next hop or origin server. |
| # |
| # YAML-based Configuration file |
| # Format : |
| # Actions available: |
| # http2 - adds or removes HTTP/2 (H2) from the protocol list advertised by ATS; parameter required = None, parameters = on or off |
| # verify_client - sets the verification flag for verifying the client certificate; parameters = one of 'NONE', 'MODERATE' or 'STRICT' |
| # verify_origin_server - sets the verification flag for verifying the server certificate; parameters = one of 'NONE', 'MODERATE' or 'STRICT' |
| # client_cert - sets the client certificate to present to the server specified in dest_host; parameters = certificate file . |
| # The location of the certificate file is relative to proxy.config.ssl.server.cert.path directory. |
| # tunnel_route - sets the e2e tunnel route |
| # ip_allow - lists or range of client IP addresses, subnets that are allowed for this connection. This accepts CIDR format |
| # for subnet specification. |
| # |
| # Example: |
| # sni: |
| # - fqdn: one.com |
| # http2: off |
| # verify_origin_server: STRICT |
| # client_cert: somepem.pem |
| # verify_client: MODERATE |
| # - fqdn: two.com |
| # tunnel_route: two.com |
| # ip_allow: '10.0.0.1-10.0.0.255' |
