https://blog.none.at Production notes on Kubernetes, OpenShift, and OVHcloud: observability, log archiving, service mesh, LLM inference, and digital sovereignty. Zola en Mon, 16 Mar 2026 00:00:00 +0000 Tue, 02 Jul 2024 00:00:00 +0000 aleks https://blog.none.at/blog/2024/2024-07-02-tls-proxy-tunnel/ https://blog.none.at/blog/2024/2024-07-02-tls-proxy-tunnel/ <p>Many enterprise networks sit behind a corporate HTTP CONNECT proxy. Applications that speak TLS natively — think <code>git</code>, <code>curl</code>, SSH-over-HTTPS, or any custom binary — often have no built-in proxy support. Configuring every single tool is tedious, fragile, and sometimes impossible when you don’t control the binary.</p> <p><code>tls-proxy-tunnel</code> (<code>tpt</code>) solves this at layer 4: it sits between your application and the outside world, intercepts the TLS connection, extracts the Server Name Indication (SNI) from the ClientHello, and tunnels the raw bytes through your corporate HTTP CONNECT proxy — without ever terminating TLS.</p> Fri, 17 May 2019 00:00:00 +0000 aleks https://blog.none.at/blog/2019/2019-05-17-haproxy-sni-routing/ https://blog.none.at/blog/2019/2019-05-17-haproxy-sni-routing/ <p>As I travel a lot I faced the problem that in some Wi-Fi networks certain ports are blocked for outgoing communication 😱. The solution is to use software that can handle TCP and HTTP via port <strong>443</strong> so that I can use my Nextcloud and my XMPP client on the same port.</p>