Production notes on Kubernetes, OpenShift, and OVHcloud: observability, log archiving, service mesh, LLM inference, and digital sovereignty. Zola 2026-03-16T00:00:00+00:00 https://blog.none.at/tags/sni/atom.xml 2024-07-02T00:00:00+00:00 2026-01-22T00:00:00+00:00 aleks https://blog.none.at/blog/2024/2024-07-02-tls-proxy-tunnel/

<p>Many enterprise networks sit behind a corporate HTTP CONNECT proxy. Applications that speak TLS natively — think <code>git</code>, <code>curl</code>, SSH-over-HTTPS, or any custom binary — often have no built-in proxy support. Configuring every single tool is tedious, fragile, and sometimes impossible when you don’t control the binary.</p> <p><code>tls-proxy-tunnel</code> (<code>tpt</code>) solves this at layer 4: it sits between your application and the outside world, intercepts the TLS connection, extracts the Server Name Indication (SNI) from the ClientHello, and tunnels the raw bytes through your corporate HTTP CONNECT proxy — without ever terminating TLS.</p>

2019-05-17T00:00:00+00:00 2026-03-16T00:00:00+00:00 aleks https://blog.none.at/blog/2019/2019-05-17-haproxy-sni-routing/

<p>As I travel a lot I faced the problem that in some Wi-Fi networks certain ports are blocked for outgoing communication 😱. The solution is to use software that can handle TCP and HTTP via port <strong>443</strong> so that I can use my Nextcloud and my XMPP client on the same port.</p>