Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to manage multiple SSL Certificates on Amazon ELC instances farm, running multiple domains on a Ruby on Rails application.

The problem is that we need to dynamically add new certificates to the instances or balancer to provide SSL. We need to do it every time a new domain is directed to our application, or when a domain already linked is selected to enable SSL and a new certificate is uploaded.

At this moment we have one Elastic Load Balancer and 8 instances(and counting) behind it. But one ELB only allows one certificate, and create one balancer per domain is not a desirable option.

I'm thinking in complement the ELB with HAProxy to share the same IP/Port using SNI, but I'm not sure if this is possible and works on all browsers. We tried to enable SSL on the instances, but required to use as many ports as certificates so it's not easy to manage, and still have to add more balancers.

What alternatives would you try?

In your opinion, what's the best way to dynamically add Certificates?

Thanks a lot.

share|improve this question

An alternative is to use a SAN Cert The maintenance here is that every time you add a domain you'll need to have them reissue the certificate. You set ELB in tcp mode and terminate at the server level.

share|improve this answer
Are you sure need to terminate the server and not the ELB? See… – Mark Stosberg Jan 14 '15 at 16:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.