mholt/caddy-l4

Support ECH Split Mode

开放

#330 创建于 2025年9月3日

 (2 条评论) (4 个反应) (0 位负责人)Go (114 个派生)github user discovery
enhancementhelp wanted

仓库指标

星标
 (1,738 个星标)
PR 合并指标
 (平均合并 14天 19小时) (30 天内合并 7 个 PR)

描述

Hi, I'd like to set up a Caddy-l4 server to accept ECH, and do SNI/QUIC-SNI routing based on the decrypted Inner ClientHello without terminating TLS. I believe this makes Caddy-l4 act as a client-facing server in the Split Mode topology of the draft spec.

I'd like to ask: could it be some day supported in Caddy-L4?

I guess this would probably involve reading SNI matchers for the anonymity set, and remove certs management entirely from Caddy-L4's side. Though I'm not qualified to speak of implementation details

Please let me know if this can be possible, thanks in advance


Further thoughts (just leaving them here if that's okay): redacted because they're rubbish

贡献者指南