Kyle Isom 357ad60e42 Skip backend cert verification for L7 re-encrypt routes ...

When backend_tls=true, the h2 transport was verifying the backend's
TLS certificate. This fails when the backend address is an IP (no
IP SANs) or uses a self-signed cert. Backend connections are to
trusted internal services — skip verification. Also change rift
metrics port to 9091 to avoid conflict with exod on 9090.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-25 19:41:58 -07:00

..

policy_test.go

Add Prometheus metrics for connections, firewall, L7, and bytes transferred

2026-03-25 18:05:25 -07:00

policy.go

Add Prometheus metrics for connections, firewall, L7, and bytes transferred

2026-03-25 18:05:25 -07:00

prefixconn_test.go

Add L7 TLS-terminating HTTP/2 reverse proxy

2026-03-25 13:43:20 -07:00

prefixconn.go

Add L7 TLS-terminating HTTP/2 reverse proxy

2026-03-25 13:43:20 -07:00

serve_test.go

Add L7 policies for user-agent blocking and required headers

2026-03-25 17:11:05 -07:00

serve.go

Skip backend cert verification for L7 re-encrypt routes

2026-03-25 19:41:58 -07:00