Pass

Allows passing the accepted connection directly to any configured listening socket in HTTP, Stream, or Mail modules.

The module enables selective SSL termination based on SNI.

When building from the source code, the module is built by default together with the Stream module (enabled with --with-stream); it can be disabled with the build option --without-stream_pass_module.

In packages and images from our repositories, the module is included in the build.

Configuration Example

After the stream module handles the SSL/TLS termination, it forwards the connection to the http module:

stream {

    server {

        listen 8000 default_server;
        ssl_preread on;
        # ...
    }

    server {

        listen 8000;
        server_name foo.example.com;
        pass 127.0.0.1:8001; # to HTTP
    }

    server {

        listen 8000;
        server_name bar.example.com;
        # ...
    }
}

http {

    server {

        listen 8001 ssl;
        # ...

        location / {

            root html;
        }
    }
}

Directives

pass

Syntax	pass address;
Default	—
Context	server

This directive sets the server address to which the client connection should be passed. The address can be given as an IP address and port:

pass 127.0.0.1:12345;

Or as a path to a UNIX domain socket:

pass unix:/tmp/stream.socket;

Also, the address can be set with variables:

pass $upstream;