SNI Impacts

[chrismca73]

Hi Team,

I would like to know what are the side effects if I am enabling SNI in my On-Prem v4.18.05.

In our case we are facing 503 for one of our external API where they enabled SNI.

For accessing SNI enabled services if we enabled our side SNI by setting this value true, whether this affect our non SNI clients who are all consuming our APIs?

conf_system_jsse.enableSNIExtension=true

[dchiesa1 · Accepted solution]

SNI is used to negotiate the connection between TLS client and TLS server. Apigee supports SNI for

• inbound connections (client to Apigee)
• outbound connections (Apigee to some backend system)

The documentation is here.

You can enable SNI on either end, and it will not affect the other. Also, the SNI on the inbound connections is set up on virtual hosts, and changing any one virtual host to support SNI will not affect other vhosts that do not use SNI.

[chrismca73]

We enabled it in outbound connection. Now its working. Thanks