Exposing through 443 with TLS multiple protocols

Help
1

Hi everyone,

I’ve been experimenting with the Caddy Layer 4 module because I see a lot of potential in it. I have a question about its capabilities and whether something specific is possible.

I want to expose two services over port 443 with TLS with a domain name: one HTTP server and one TURN server. I noticed that Layer 4 can be configured using the layer4.matchers.regexp.

Is it possible to use this matcher to multiplex traffic to both servers over port 443 with TLS?

I was considering the following approach:

  1. Identify TURN bytes in TCP traffic with layer4.matchers.regexp
  2. If a regex match is found, forward the traffic to the TURN server.
  3. If no match is found, fall back to the HTTP server.

I’m curious if this setup is feasible or if my assumptions are incorrect.

Best regards.

2

It should be possible. Is “TURN over TLS” a thing? You’d need a tls handler first to unwrap the TLS connection, and then you can match the bytes to see if it’s HTTP or TURN traffic then proxy it where it needs to go.

2 Likes
3

Yes! Turn over TLS exists (turns). It’s the last resort when a WebRTC direct UDP or TCP connection is not possible

I will try it and let you know :slight_smile:

Thanks for your answer!

4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.