Logs every TLS connection an sslProxy forwards, with the client it came from and the backend it goes to. A passthrough connection is never decrypted and leaves no other trace, so this is the way to see which proxy handled which connection when several share a port.

Logged at INFO. Only the connection is logged, never its content: Membrane does not terminate TLS here and never sees the plaintext. The name the client requested through the TLS SNI extension is not logged either - the gateway matched it against the proxy's host before the connection got here, and that host opens the log line.

See tutorials/ssl-tls/30-TLS-Passthrough.yaml.

Example Configuration

sslProxy:
   host: api.example.com
   port: 8443
   interceptors:
     - sslLog: {}
   target:
     host: api.example.com
     port: 443

sslProxy:
   host: api.example.com
   port: 8443
   interceptors:
     - sslLog: {}
   target:
     host: api.example.com
     port: 443

Syntax

sslLog: {}

sslLog: {}

Can be used in

sslProxy