Don't use "dst" literal as sni name on https backends with host=dst i…

…s set (#917) Fixes #916
fabiolb · Dec 7, 2022 · d76b4ac · d76b4ac
1 parent adbc14a
commit d76b4ac
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/route/route.go b/route/route.go
@@ -75,7 +75,9 @@ func (r *Route) addTarget(service string, targetURL *url.URL, fixedWeight float6
 		t.Host = opts["host"]
 		t.ProxyProto = opts["pxyproto"] == "true"
 
-		if t.Host != "" && (t.URL.Scheme == "https" || opts["proto"] == "https") {
+		// if Host is "dst", we don't need a special transport to override the sni because
+		// this is already the default behavior.
+		if t.Host != "" && t.Host != "dst" && (t.URL.Scheme == "https" || opts["proto"] == "https") {
 			t.Transport = transport.NewTransport(&tls.Config{ServerName: t.Host, InsecureSkipVerify: t.TLSSkipVerify})
 		}