cloudflare / cloudflare/pingora

SSL connection metadata should be available to request filters

Open
#119 9 comments 9 reactions 1 assignee Claimed by @eaufavor View on GitHub
enhancement
Dominant language
Rust
Stars
27.4k
Forks
1.7k
Avg merge
6h 22m
Merged PRs (30d)
3

Description

## What is the problem your feature solves, or the need it fulfills?

SSL connection metadata should be available to filters such as request_filter.

Metadata such as the following would be useful for routing, logging, and generation of JA3 fingerprints

- SNI
- Cipher
- TLS Version
- Extensions list
- Client ciphers, curve list and formats

## Describe the solution you'd like

The metadata would be accessible through via the request_filters through the `Session` struct.

## Describe alternatives you've considered

There are no alternatives as the data is not currently available.

## Additional context

HAProxy provides the following SSL metadata:
https://www.haproxy.com/documentation/haproxy-configuration-manual/latest/#7.3.4-ssl_fc

NGINX:
http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.