Hello,
We do have a ha multiregion puppet setup.
Each puppet has foreman-proxy installed.
We do offload ssl on F5s do some modification into headers and pass traffic down to puppet encrypting it again.
With puppet it was easy since they do support external termination.
Proxies setup to allow traffic by trusted hosts, of course ssl offloading f5 sends it’s CN.
Is there a way we can supply our requests with the right CN as we’ve done with puppet (modifying http headers)
Thanks!