I've been looking around different setups for a server cluster supporting SSL and I would like to benchmark my idea with you.
- All servers in the cluster should be under the same full domain name. (http and https)
- Routing to subsystems is done on URI matching in HA proxy.
- All URIs have support for SSL support.
Centralizing routing rules
---<----http-----<-- | | Inet -->HA--+---https--->NGInx_SSL_1..N | | +---http---> Apache_1..M | +---http---> NodeJS
Idea: Configure HA to route all SSL traffic (mode=tcp,algorithm=Source) to an NGInx cluster turning https traffic into http. Re-pass the http traffic from NGInx to the HA for normal load-balancing which performs load balancing based on HA config.
My question is simply: Is this the best way to to configure based on requirements above?