10.2 Using poundctl for remote access

Starting from version 4.14, pound is able to provide its management interface via HTTP (see Service Control). To use remote management interface, supply its URL with the -s command line option. The URL syntax is:

scheme://[user[:password]@]hostname[:port][/path]

where ‘[]’ denote optional parts. Valid scheme values are ‘http’ and ‘https’. Use user and password if the interface is protected by basic authentication (see Authentication).

When using ‘https’ protocol, you may need to supply the certificate authority file using the -C file option, where file is the name of the file in PEM format. This option can also take a directory name as its argument. In this case all PEM files from that directory will be loaded.

To disable peer certificate verification, use the -k option.

If pound configuration requires the client to send its certificate for authentication (See ClientCert, or see ClientCert conditional), use the -K file option to supply it. Its argument, file, is the name of the file with the certificate and key in PEM format.