Hello everyone,

We use OpenBSD relayd to load balance the Apache web server.
Apache has introduced stricter SNI checking in the current version. This
results in requests from relayd to Apache being answered with HTTP code 421.

There is a workaround for Nginx by adding these settings:

proxy_ssl_server_name on;
proxy_ssl_name $host;

There is also a similar solution for haproxy:

haproxy, add 'sni req.hdr(host)

Is this issue known, and is there a comparable setting in relayd?

Here are a few more links to the issue:

https://bitninja.com/blog/the-latest-apache-update-a-421-misdirected-request-crisis/
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/2117112

Thank you!

Reply via email to