3

So, I'm running three EC2 instances behind an AWS load balancer. I want to purchase an SSL certificate to use with these machines. Should I just purchase the certificate for the load balancer's public IP address and install the certificate on each machine? Will this work?

2 Answers 2

11

AWS Elastic Load Balancer supports SSL termination at the load balancer. This means you can install your SSL certificate on the load balancer itself. The load balancer will then talk unencrypted HTTP between the load balancer and your EC2 instance.

This way you only have to install the certificate on the ELB instead of every machine. Have your Apache/Nginx/Lighttpd/whatever use plain HTTP, not SSL. Let the load balancer handle all of the SSL.

4
  • 2
    Terrific. This is explained in more detail on the AWS Blog: aws.typepad.com/aws/2010/10/…
    – rrbrambley
    Jan 23, 2011 at 6:46
  • +1 for a spot on answer. :)
    – Andrew M.
    Jan 23, 2011 at 14:59
  • Does this work when you want to serve multiple separate SSL websites? Can you associate multiple SSL certs with the LB? Sep 18, 2011 at 3:20
  • 1
    I haven't tested it, but I expect that you can use a UC certificate, which allows you to specify multiple hostnames in one certificate.
    – Avleen
    Oct 19, 2011 at 2:37
2

Definitely terminate the SSL at the load balancer and check x-forwarded-proto header in your code. Installing the SSL cert on ELB is dead easy if you follow this article: http://cloudarch.co.uk/2011/10/elastic-load-balancer-ssl-setup-guide-pem-encoded-csr/#comment-561

Took me about 5 minutes.

1
  • Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference.
    – Scott Pack
    Oct 13, 2012 at 21:10

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .