1
vote
1answer
67 views

Load Balancer and using multiple SSL certificates

Here is our current production configuration at a 3rd party data center: •2 LINUX/CentOS tomcat web servers behind a shared load balancer •DNS entries point to the load balancer •Web apps are ...
0
votes
1answer
278 views

Scaling Multiple SSL Domains on Multiple EC2 instances in AWS ELB

I'm setting up server that will host multiple SSL domains across a wide range of load balanced EC2 instances and being a programmer who really sucks at network/infrastructure stuff I had some ...
0
votes
0answers
92 views

SSL Integration with apache used for load balancing

We are using apache mod-proxy on top of tomcat to achive load balancing. It is working fine , now we are planning to move to https from httpd . For that my configuration looks as follows ...
0
votes
1answer
203 views

Trying to setup transparent, load balancing, SSL reverse proxy. Is it possible?

I've done a few weeks worth of research on this topic for a project, and unfortunately I'm a simple code monkey, my knowledge of networking and SSL are limited. Pretty much every search I've done so ...
1
vote
1answer
118 views

How can our customers use our SaaS with their own SSL certificate?

We offer software as a service that is fully hosted on Amazon Web Services (AWS). We mainly use Elastic Beanstalk (elastic load balancer + ec2 instances) and RDS (database service) plus many other ...
1
vote
1answer
75 views

Drop non SSL packets on Linux

I would like to filter out all non-SSL based traffic for a specific port (443). Is there a way to do this with iptables, or another Linux application?
0
votes
1answer
597 views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
1answer
349 views

Unable to configure haproxy with ssl

I want to make my server ssl protected, it has two parts one for website and another for application. to balance them we have used haproxy. Now we want to secure this haproxy. I have installed the ...
0
votes
1answer
474 views

How can I use SSL behind a load balancer and still get the client IP?

Note, I can't use SSL termination at the load balancer, due to network security related issues. The client IP I get is of course that of the load balancer. I know that the load balancer can't modify ...
0
votes
2answers
252 views

Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?

I have read, namely on Rackspace, that one should not use SSL termination for sensitive information (search the page for "SSL Termination should not be used"). Firstly, why would that be the case. ...
0
votes
1answer
388 views

Load balance https and websockets wth sticky sessions and NGINX

I'm using NGINX to do sticky session load balancing in front of a node.js app that will support http, ssl, and websockets. If I want the load balancer to simply forward requests to the node.js server ...
0
votes
1answer
243 views

Does LVS ldirectord Load Balancer support SSL termination / offloading?

I use a ldirectord setup for load balancing a couple of real servers and for the HTTPS conenctions I am considering using some offloading mechanism on the LB - is there some functionality already ...
3
votes
1answer
5k views

How to horizontally scale SSL termination behind HAProxy load balancing?

I've been looking around and no one seems to be trying to scale SSL termination the way I am and I'm curious as to why my approach seems so uncommon. Here's what I want to do followed by why: ...
1
vote
1answer
148 views

Encrypted tunnel from load balancer to upstream servers. SSH vs. SSL?

We're building a load balanced setup with two load balancers (that also terminate SSL) and several upstream servers. Both the load balancers and the upstream servers run nginx. The network on which ...
0
votes
2answers
260 views

What steps i need to configure ssl on haproxy/iis

I have two web server and one haproxy load balancer in front of them. I want to setup ssl connection for my login page. Can someone give me life cycle steps what i need to do? Can i make this with ...
1
vote
1answer
357 views

Websockets not working (ssl acceleration?)

Testing a socket.io application in the PROD environment for the first time, we found that while the xhr-polling transport (Ajax long polling) works, the websocket transport does not. Looking at the ...
2
votes
1answer
715 views

url request aborted http traffic apache

I'm having problem in our extjs php application. We have two server and there is a load balancing (NLB) in there working in a round robin way . While using the system the user is having some problems ...
0
votes
1answer
174 views

apache, shibboleth, load balancing alias, ssl

Good morning folks Could you give me a bit of help with the following problem ? I have a dns load balancing mechanism and an alias (hostAlias) which may point to host01, or host02 I want to ...
0
votes
2answers
98 views

Can I use apache http server as forwarder to Tomcat?

I have a Tomcat server that listens in 8080(http), 443(https), 7443(https). Note that the connectors for 443 and 7443 use different certificates. I am interested in using httpd for load balancing. Is ...
2
votes
2answers
258 views

How do I get nginx to issue 301 requests to HTTPS location, when SSL handled by a load-balancer?

I've noticed that there's functionality enabled in nginx by default, whereby a url request without a trailing slash for a directory which exists in the filesystem automatically has a slash added ...
1
vote
1answer
317 views

Serving multiple SSL Websites from a limited number of IPs using load balancers?

We currently host multiple sitecore sites on a rackspace cloud server, we have 5 sites, with 5 IPs and with 5 SSLs. Because rackspace will only allow 4 additional IPv4 addresses on a box we're at the ...
0
votes
2answers
1k views

Apache load balancer with https real servers and client certificates

Our network requirements state that ALL network traffic must be encrypted. The network configuration looks like this: ------------ ...
0
votes
1answer
87 views

raxmon equivalent for load balancer ssl termination on rackspace?

Looking into RackSpace SSL termination and realizing the API to configure SSL termination is extremely bare. Before I get started writing a client, does anyone know if there is something out there ...
2
votes
2answers
673 views

Should I use an ssl terminator or just haproxy?

I'm trying to figure out how to set up my architecture for a socket.io app that will require both https and wss connections. I've found many tutorials on the web suggesting that you use something like ...
0
votes
0answers
240 views

AWS SSL Load Balancer

OK, I am looking for some pointers. Basically I have a white-label app/site that will allow users to setup their own domain to use for their customer front-end. We have 2 dedicated servers and a load ...
1
vote
1answer
120 views

How does one test the SSL cert on a specific server while testing through a load balancer?

I use Linode's NodeBalancer and would like to make sure each of the servers are terminating the SSL correctly. Right now I'm waiting on DNS propagation to test placing an A record of the format of ...
1
vote
2answers
2k views

Possible to redirect from HTTPS to HTTP behind load-balancer?

I have a basic ASP.NET application that sits behind an F5 load-balancer. Incoming SSL requests (over HTTPS) terminate at the load-balancer and all internal communication between the load-balancer and ...
2
votes
1answer
669 views

What's the best way to detect whether an incoming request is secure?

Is there a preferred method of detecting HTTP vs. HTTPS on an incoming request to an F5 load-balancer? We are attempting to detect secure vs. non-secure with an iRule and pass a corresponding header ...
7
votes
4answers
8k views

How do I Install Intermediate Certificates (in AWS)?

I have installed private key (pem encoded) and public key certificate (pem encoded) on Amazon Load Balancer. However, when I check the SSL with site test tool, I get the following error: Error ...
1
vote
1answer
1k views

Way to speed up load-balanced ssl using nginx?

So the setup for our website is 4 nodes running rails 3 and nginx 1 that all use the same GoDaddy certificate. Because we are a paid site, we have to maintain PCI-DSS compliance and thus have to use ...
2
votes
2answers
917 views

Building an SSL server farm

I'm interested in building the the architecture in the article referenced below. I currently have a modestly-priced layer-4 load balancer and my application servers are the SSL endpoints. I want to ...
4
votes
2answers
800 views

Is there a Linux HA software load balancer that serves HTTPS for multiple unrelated domain names but balances to a single web server cluster?

I have a cloud-based (Amazon AWS, Rackspace, whatever) multi-tenant SaaS application, and I need to support HTTPS communications for multiple unrelated tenant domains. As an illustrative example, ...
1
vote
2answers
251 views

SSL on Multiple Sites, 1 IP, Different Certificates, UCC not an option

We are looking to set up a cloud solution for one of our systems, but we need multiple TLD SSL's We are only allowed 5 public IP's Can't use UCC/Wildcard Certs since each client has own cert and ...
3
votes
1answer
438 views

HAProxy and Stunnel PCI Compliance

I am setting up HAProxy to load balance between two web servers. Some of the pages on the site require SSL. Stunnel is handling the https connections and passing them off to haproxy (Stunnel ...
0
votes
0answers
217 views

How do you scale PUSH server on multiple machines?

I am thinking about setting up multiple servers under a load balancer that will use PUSH with websockets. I will be using SSL, so for that reason I don't think I can use sticky sessions. So is there a ...
0
votes
1answer
433 views

SSL Migration from NGINX proxy to Citrix NetScaler VPX problems

We migrated a bunch of our sites (changed static IP addresses) from an NGINX proxy to a Citrix NetScaler VPX instance. We tested our sites using every browser available, and they all appeared to be ...
2
votes
1answer
773 views

How can you detect SSL offload on server behind a load balancer?

In our production environment the SSL is offloaded to the load balancer. This was done to reduce the CPU load on the servers. For the most part this is perfectly fine, however, we now need the ...
1
vote
1answer
106 views

I'm being asked to support mapping many SSL keys to one IP but I think it's a bad idea. Am I wrong?

At work, I've been asked to add support for mapping multiple keys to a single (or many even) IP to what is essentially a passive HTTP sniffer. It supports SSL decryption with user-uploaded keys. ...
16
votes
7answers
23k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
0
votes
2answers
544 views

BigIP load balanced Rails 3 / Apache app not handling selective SSL correctly?

So here's the setup. I've got a Rails 3 application deployed to two servers, both running Apache2, both with identical VirtualHost configs, both operating on Passenger. There are a few routes in the ...
0
votes
1answer
343 views

Load balance Apache and a SOAP application over SSL while retaining client IP address

We are trying to find the most suitable load balancing solution that will work with our application, but I quickly found I don't know much on the subject. We were going to run Varnish Cache but we use ...
2
votes
1answer
659 views

HTTPS Stunnel and Haproxy

I am trying to use stunnel infront of Haproxy for SSL support. SSL certificates are located according to stunnel configuration. I am also able to get the https connection, but every time I use https, ...
0
votes
2answers
432 views

Force redirect to HTTP from https in apache when ssl is in load balancer

We are using CISCO hardware load balancer for enforcing SSL(https). Now i need to force some url always to http and all other url to https. for ex encrypt_no_need.php always need to be http i.e if ...
1
vote
3answers
2k views

OpenSource (Layer 4) Load Balancer that can pass through original client IP?

I am setting up a web application which uses SSL for all requests. It needs to have room for scaling and also be highly available. It seems that the "recommended" way to handle this is to setup a pair ...
4
votes
3answers
2k views

SSL/HTTPS within an Amazon ELB workflow

So I've got a few EC2 instances acting as nodes on an ELB, and want to setup a wildcard certificate. Anyone have any good directions/links I can look into? I'm a little confused about the CSR file ...
1
vote
4answers
2k views

Apache SSL losing session over load balancer

I have two physical Apache servers behind a load balancer. The load balancer was supposed to be set up so that a user would always be sent to the same physical server after the first request, to ...
2
votes
2answers
2k views

High performance SSL Terminator on Linux

I want to setup a SSL terminator / load-balancer in front of my tcp service, I've considered 1) Stunnel (weird performance problem, I compiled it with no-libwrap, pthreads but still pretty slow for ...
0
votes
1answer
163 views

Deploying SSL Certificate in server Cluster with HW Load Balancer

We have an application with 2 parallel servers and a Hardware Load Balancer but No Webserver is used. We want to implement SSL for the application. What should be the best approach? 1. Configure SSL ...
1
vote
4answers
1k views

Cost effective way to handle high SSL traffic?

Some time in the future, I may need to build a dedicated SSL farm (as described in Making applications scalable with Load Balancing) or something similar to handle lots of SSL traffic. While it's not ...
2
votes
3answers
655 views

CSR, SSL and load balancers?

do I need to generate a CSR on the load balancer or on the individual servers?