I need to create an auto scaling, load balanced solution on EC2 behind a single IP address with IIS 7.5 as an app server(s).
I've got a pretty good working setup with haproxy (as a reverse proxy) with the single IP address assigned passing traffic through to ELB which passes traffic to the auto scaling IIS instances.
There are some issues with this setup:
- Haproxy is a single point of failure - if it goes down I'd need to manually restart.
- I'm concerned ELB will see a single IP address in front of it and therefore route all traffic to only one server and I'm not totally sure how to test this. I've heard rumours that this is the case but I'm not sure.
- SSL traffic is proving fairly complex as I seem to need to pass it through in "mode tcp" on haproxy as the decryption is done on ELB and I don't think the standard IIS that Amazon fires up for us will bind to tcp traffic without me doing some manual config (so then I can't use autoscaling)
My question is - is this setup stupid/crazy - should I be looking to simply manage haproxy and IIS instances with no ELB involved? Are there any services that would help me do this (I only know of Rightscale - i think this would be achievable with their templates). We can't use a service like AppHarbor as we are serving some web sites.
On Linux this would be straightforward I know - but we can't change the web app platform.
Any advice would be much appreciated...