Frontend

TLS offloading

• Contains a list of certificates assigned to servernames. Most certs contain several servernames.
• Performs letsencrypt certificate handshake (implemented as a LUA plugin).

Logging

• Implements a custom log to track timing information.
• Sets log level via ACLs.
  • Just logs shop6.
  • Does not log http -> https redirects.
  • Does not log servername redirects (giffits.de (opens new window) -> www.giffits.de (opens new window)).
  • Log levels are mostly defined in backends.

Service detection

The ACL section handles:

• Servernames
• URIs

These ACLs are then used in a chain of use_backend directives.