Skip to content

Ship TlsFilter sample as new Kestrel middleware #2128

Open
@Tratcher

Description

@Tratcher

https://github.com/microsoft/reverse-proxy/blob/f3c5a14e005b0adf247c3ca34fe45c88c87530c2/testassets/ReverseProxy.Direct/TlsFilter.cs

Background:
This sample shows how to intercept TLS handshakes and do efficient filtering for supported protocols, hosts, ciphers, etc. However, it uses non-trivial pipelines code that's difficult for our customers to work with.

Proposal:
Ship an in-box kestrel connection middleware that sniffs the handshake and stores the TLS details as a feature on the connection context. The customer can then have a much simpler middleware after to enforce their policies.

Features:

Metadata

Metadata

Assignees

Labels

Type: IdeaThis issue is a high-level idea for discussion.

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions