{"id":21254,"date":"2022-09-22T04:15:27","date_gmt":"2022-09-22T04:15:27","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=21254"},"modified":"2026-04-17T18:07:43","modified_gmt":"2026-04-17T18:07:43","slug":"description-of-the-server-name-indication-feature-on-nsfocus-waf","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/","title":{"rendered":"Description of the Server Name Indication Feature on NSFOCUS WAF"},"content":{"rendered":"\n

The early SSLv2 was designed based on the classic public key infrastructure. By default, a server or an IP address could provide only one service so that the server could know which certificate to serve during the SSL handshake. The widespread use of virtual hosts leads to the situation where multiple domain names are mapped to one IP address.<\/p>\n\n\n\n

Server Name Indication (SNI), an extension of SSL\/TLS, allows a server to use multiple domain names and certificates, which is defined in RFC 4366. As an enhancement to SSL\/TLS， SNI is used in SSLv3\/TLSv1. It allows the client to specify the host name before initiating an SSL handshake, specifically in the ClientHello phase of the SSL request.  Then the server can choose the correct domain name and return the corresponding certificate. Currently, SNI extension is supported by most operating systems and browsers.<\/p>\n\n\n\n

NSFOCUS WAF supports SNI and can use one IP address to proxy multiple sites in the reverse proxy mode. For example, two virtual sites are deployed in the same site group, and each uses its own website certificate. When the client’s SSL request reaches WAF, WAF analyzes the SNI information in the SSL request and selects the corresponding website certificate to perform encrypted communication with the client.<\/p>\n\n\n\n

Note: To use SNI, both the client and the server should support SNI.<\/strong><\/strong><\/p>\n\n\n\n

Configuration Procedures:<\/strong><\/p>\n\n\n\n

Choose Security Management<\/strong> > Website Protection<\/strong>, and click the icon \"Red to create a website group. In the website list, click Add Website<\/strong> to add a website. In the virtual website list, click Add Virtual Website<\/strong> to add a virtual website.<\/p>\n\n\n\n

\"Red<\/a><\/figure>\n\n\n\n

Enable the SSL certificate for each virtual website. The following takes NSFOCUS_1 and NSFOCUS_2 virtual sites as examples, and SSL certificates are selected for them respectively.<\/p>\n\n\n\n

Select an SSL certificate for NSFOCUS_1 virtual site as shown in the following figure.<\/p>\n\n\n\n

\"Red<\/a><\/figure>\n\n\n\n

Select an SSL certificate for NSFOCUS_2 virtual site as shown in the following figure.<\/p>\n\n\n\n

\"Red<\/a><\/figure>\n\n\n\n

Visit each virtual website. You can view that the server returns different SSL certificates. It can be seen that WAF can analyze the SNI information in the SSL request and select the corresponding website certificate for encrypted communication with the client.<\/p>\n\n\n\n

\"Red<\/a><\/figure>\n\n\n\n
\"Red<\/a><\/figure>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"

The early SSLv2 was designed based on the classic public key infrastructure. By default, a server or an IP address could provide only one service so that the server could know which certificate to serve during the SSL handshake. The widespread use of virtual hosts leads to the situation where multiple domain names are mapped […]<\/p>\n","protected":false},"author":1,"featured_media":35741,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[21],"tags":[741],"class_list":["post-21254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-waf","tag-web-security"],"acf":[],"yoast_head":"\nDescription of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Description of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS\" \/>\n<meta property=\"og:description\" content=\"The early SSLv2 was designed based on the classic public key infrastructure. By default, a server or an IP address could provide only one service so that\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/\" \/>\n<meta property=\"og:site_name\" content=\"NSFOCUS\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-22T04:15:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-17T18:07:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Description of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS\" \/>\n<meta name=\"twitter:description\" content=\"The early SSLv2 was designed based on the classic public key infrastructure. By default, a server or an IP address could provide only one service so that\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\"},\"headline\":\"Description of the Server Name Indication Feature on NSFOCUS WAF\",\"datePublished\":\"2022-09-22T04:15:27+00:00\",\"dateModified\":\"2026-04-17T18:07:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/\"},\"wordCount\":378,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/icon-1.png\",\"keywords\":[\"Web Security\"],\"articleSection\":[\"WAF\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/\",\"name\":\"Description of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/icon-1.png\",\"datePublished\":\"2022-09-22T04:15:27+00:00\",\"dateModified\":\"2026-04-17T18:07:43+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/icon-1.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/icon-1.png\",\"width\":21,\"height\":18,\"caption\":\"Green plus sign on gray background.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/description-of-the-server-name-indication-feature-on-nsfocus-waf\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsfocusglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Description of the Server Name Indication Feature on NSFOCUS WAF\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"name\":\"NSFOCUS\",\"description\":\"Security Made Smart and Simple\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\",\"name\":\"NSFOCUS\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"width\":248,\"height\":36,\"caption\":\"NSFOCUS\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/nsfocusglobal.com\"],\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Description of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"pt_BR","og_type":"article","og_title":"Description of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS","og_description":"The early SSLv2 was designed based on the classic public key infrastructure. By default, a server or an IP address could provide only one service so that","og_url":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/","og_site_name":"NSFOCUS","article_published_time":"2022-09-22T04:15:27+00:00","article_modified_time":"2026-04-17T18:07:43+00:00","og_image":[{"url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png","type":"","width":"","height":""}],"author":"admin","twitter_card":"summary_large_image","twitter_title":"Description of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS","twitter_description":"The early SSLv2 was designed based on the classic public key infrastructure. By default, a server or an IP address could provide only one service so that","twitter_image":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png","twitter_misc":{"Escrito por":"admin","Est. tempo de leitura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#article","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/"},"author":{"name":"admin","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d"},"headline":"Description of the Server Name Indication Feature on NSFOCUS WAF","datePublished":"2022-09-22T04:15:27+00:00","dateModified":"2026-04-17T18:07:43+00:00","mainEntityOfPage":{"@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/"},"wordCount":378,"commentCount":0,"publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"image":{"@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png","keywords":["Web Security"],"articleSection":["WAF"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/","url":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/","name":"Description of the Server Name Indication Feature on NSFOCUS WAF - NSFOCUS","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#primaryimage"},"image":{"@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png","datePublished":"2022-09-22T04:15:27+00:00","dateModified":"2026-04-17T18:07:43+00:00","breadcrumb":{"@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#primaryimage","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/09\/icon-1.png","width":21,"height":18,"caption":"Green plus sign on gray background."},{"@type":"BreadcrumbList","@id":"https:\/\/nsfocusglobal.com\/description-of-the-server-name-indication-feature-on-nsfocus-waf\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nsfocusglobal.com\/"},{"@type":"ListItem","position":2,"name":"Description of the Server Name Indication Feature on NSFOCUS WAF"}]},{"@type":"WebSite","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website","url":"https:\/\/nsfocusglobal.com\/pt-br\/","name":"NSFOCUS","description":"Security Made Smart and Simple","publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsfocusglobal.com\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization","name":"NSFOCUS","url":"https:\/\/nsfocusglobal.com\/pt-br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","width":248,"height":36,"caption":"NSFOCUS"},"image":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d","name":"admin","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/nsfocusglobal.com"],"url":"https:\/\/nsfocusglobal.com\/pt-br\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/21254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/comments?post=21254"}],"version-history":[{"count":0,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/21254\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media\/35741"}],"wp:attachment":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media?parent=21254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/categories?post=21254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/tags?post=21254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}