The Hitch package is provided in the EPEL ( Extra Packages for Enterprise Linux) repository. How to Install Varnish Cache 6 for Apache Web Server on CentOS/RHEL 8ġ.How to Install Varnish Cache 6 for Nginx Web Server on CentOS/RHEL 8.This guide assumes that you have installed Varnish for Nginx or Apache web server, otherwise, see: Additionally, it works well for large installations that require up to 15,000 listening sockets and 500,000 certificates.Īs a continuation of our two previous articles about installing Varnish Cache for Nginx and Apache HTTP servers, this guide shows to enable HTTPS for Varnish Cache using Hitch TLS Proxy on CentOS/RHEL 8. It supports for TLS1.2 and TLS1.3 and legacy TLS 1.0/1.1, supports ALPN ( Application-Layer Protocol Negotiation) and NPN ( Next Protocol Negotiation) for HTTP/2, a PROXY protocol to signal client IP/port to a backend, UNIX domain socket connections to the origin, SNI ( Server Name Indication), with and without wildcard certificates. It terminates TLS/SSL connections by listening on port 443 (the default port for HTTPS connections) and forwards the unencrypted traffic to Varnish Cache, however, it should work with other backends too. The Hitch is a free open source, libev-based, and scalable SSL/TLS proxy designed for Varnish Cache, which currently works on Linux, OpenBSD, FreeBSD, and MacOSX. If you are using Varnish Cache to boost your web application’s performance, you need to install and configure another piece of software called an SSL/TLS termination proxy, to work alongside Varnish Cache to enable HTTPS.

Varnish Cache lacks native support for SSL/TLS and other protocols associated with port 443.

Varnish web gui