logoalt Hacker News

weitzjyesterday at 8:16 AM4 repliesview on HN

Will this have an impact on Loadbalancers? Like does one have to do client side load balancing like in gRPC?


Replies

grenranyesterday at 8:53 AM

My understanding is that you can use split mode to only have the load balancer decrypt the server name section, and forward the actual session and key exchange down to the backend without doing double layer encryption.

gzreadyesterday at 11:55 AM

If your load balanced doesn't support ECH, don't tell clients to use ECH.

j16sdizyesterday at 8:37 AM

The loadbalancer can force a downgrade .

show 1 reply