0
votes
1answer
662 views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
1answer
39 views

Loadbalancer passing client IP to the web server (HTTPS)

Can a loadbalacer (reverse proxy) configured with sticky sessions pass on the client IP to the Web servers if the session is SSL encrypted without doing SSL termination? Is it even possible to have ...
0
votes
2answers
267 views

Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?

I have read, namely on Rackspace, that one should not use SSL termination for sensitive information (search the page for "SSL Termination should not be used"). Firstly, why would that be the case. ...
0
votes
1answer
212 views

Redirect from HTTP to HTTPS with respect to the X-Forwarded-For header (SSL termination used)

I'm looking to redirect from HTTP to HTTPS. My Nginx server sits behind a load balancer which will terminate SSL for me and send all traffic (HTTP and HTTPS) to port 80. The only evidence I will have ...
6
votes
9answers
1k views

Is there any DNS system or Service that is HTTPS aware?

Basically I need for DNS to respond with different CNAMES depending if the request was made for HTTPS or HTTP object. s.test.com -> IF(https) RESPONSE special.domain.com ELSE simple.domain.com ...
1
vote
3answers
163 views

forwardfor information is missing

I use following configuration to load balance https connections, using haproxy 1.4.8. SSL offloading is done by apache. listen ssl_to_waf 192.168.101.54:443 mode tcp balance roundrobin ...
0
votes
1answer
758 views

BIG IP - HTTPS Health Monitor setup

I have a Web site that we have setup a health monitoring pages so we can take our servers in and out of the Big-IP as we see fit. Now we have just moved onto Big-IP and the issue I have hit is that ...
2
votes
1answer
731 views

What's the best way to detect whether an incoming request is secure?

Is there a preferred method of detecting HTTP vs. HTTPS on an incoming request to an F5 load-balancer? We are attempting to detect secure vs. non-secure with an iRule and pass a corresponding header ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
1
vote
2answers
268 views

Certificate Error on dropping www from https://www.example.com

I was looking at this blog and SO question These things prefer to drop www from their websites. But if you are running a website on SSL and you drop www, won't you get a certificate error? I use wild ...
0
votes
1answer
104 views

Single UCC certificate on a server for SSL connections to various web sites on different servers

Background Currently we have some servers that are going to give service to a certain region, thus they have their own unshared users, although we need to establish a secure connection in order to ...
0
votes
1answer
117 views

DNS for HTTP vs HTTPS

I have internal domain DNS for Http i.e. http://companyintanet.dev.local. Do I need a separate DNS entry for https i.e. https://companyintranet.dev.local or one will suffice both. I'm trying to ...
4
votes
2answers
832 views

Is there a Linux HA software load balancer that serves HTTPS for multiple unrelated domain names but balances to a single web server cluster?

I have a cloud-based (Amazon AWS, Rackspace, whatever) multi-tenant SaaS application, and I need to support HTTPS communications for multiple unrelated tenant domains. As an illustrative example, ...
0
votes
1answer
319 views

Tomcat 7 won't allow me to have 2 Connector elements in configuration?

I need to have Tomcat 7 listen on 2 different ports for HTTP requests (the 2nd port makes webapps think it's receiving https requests because that's what's happening on the load balancer). But the ...
1
vote
1answer
108 views

I'm being asked to support mapping many SSL keys to one IP but I think it's a bad idea. Am I wrong?

At work, I've been asked to add support for mapping multiple keys to a single (or many even) IP to what is essentially a passive HTTP sniffer. It supports SSL decryption with user-uploaded keys. ...
0
votes
1answer
452 views

Is Amazon EC2 ready for real-world disk-access-heavy webapp hosting with HTTPS balancer?

Load balancing with HTTPS We have apache/java/php web application that has HTTPS sessions and we want to move to Amazon EC2 with Elastic Load balancer. But we've been reading on stackoverflow that ...
2
votes
1answer
663 views

HTTPS Stunnel and Haproxy

I am trying to use stunnel infront of Haproxy for SSL support. SSL certificates are located according to stunnel configuration. I am also able to get the https connection, but every time I use https, ...
2
votes
4answers
435 views

Are there any set back factors regarding HTTPS load-balancing?

Are there any set back factors regarding HTTPS load-balancing versus HTTP load-balancing? Could this be a reason, why doesn't HTTPS spreads on various websites? (there are cheap CA's on the market)
0
votes
2answers
437 views

Force redirect to HTTP from https in apache when ssl is in load balancer

We are using CISCO hardware load balancer for enforcing SSL(https). Now i need to force some url always to http and all other url to https. for ex encrypt_no_need.php always need to be http i.e if ...
0
votes
1answer
496 views

HTTPS request to a specific load-balanced virtual host (using Shibboleth for SSO)?

In one environment, we have three servers load balanced that have a single Tomcat instance on each, fronted by two different Apache virtual hosts. Each of those two virtual hosts (served by all three ...
5
votes
1answer
438 views

Does round-robin load balancing affect HTTPS performance?

Scenario: Small web farm behind a hardware load balancer No need for server affinity. If one server goes down, another can and should take over. Part of the system requires HTTPS. This is terminated ...
4
votes
12answers
3k views

Hardware load balancer for http and https

I am looking for a hardware load balancer for an online shop with a lot of traffic. In peaks there will be 2000 concurrent clients. Please don't come up with software solutions like ha_proxy, ...
2
votes
4answers
2k views

how to design pound -> varnish -> jboss for ha + loadbalancing

I'm planning a new infrastructure for our web application. We have two JBossAS5 servers, running in a cluster. Session state will be replicated via JBoss Cache. In front of that, there should be some ...
2
votes
1answer
903 views

Proxy SSL from load balancer

A server admin who is setting up a load balancer asked me if I wanted to: Host SSL certs directly on web servers or, Proxy SSL from the load balancer I've only done the former implementation. Can ...
7
votes
5answers
3k views

Load balancing and HTTPS strategies

I am faced with the following problem: Servers get saturated since current load balancing strategy is based on client IP. Some corporate clients access our servers from behind large proxies so all ...
1
vote
2answers
2k views

How to configure JBoss for SSL using F5 Load Balancer

I am having troubles configuring JBoss for a secure environment. Here's our environment: We have an F5 Loadbalancer which has our domain's wildcard certificate. I have several applications running ...
6
votes
2answers
15k views

Howto WCF Service HTTPS Binding and Endpoint Configuration in IIS with Load Balancer?

We have a WCF service that is being hosted on a set of 12 machines. There is a load balancer that is a gateway to these machines. Now the site is setup as SSL; as in a user accesses it through using ...
1
vote
3answers
265 views

What options are there available for securing data transfer within a semi-private network?

To be more specific, I plan to setup a load balanced e-commerce site. The two load balancers will accept https connections from the tubes, then as is the nature of ssl, they will need to verify the ...