I have a Tomcat server that listens in 8080(http), 443(https), 7443(https). Note that the connectors for 443 and 7443 use different certificates.
I am interested in using httpd for load balancing.
Is it possible to configure httd so that it simply forwards the requests to Tomcat without needing to install any certificate to httpd itself. I.e. not act as a proxy but as forwarder?
So the SSL end to end is handled by Tomcat.


No, Apache isn't capable of being a TCP load balancer; it always expects to handle HTTP requests.

For the behavior you want, take a look at HAProxy instead; it can load balance those TCP connections without being involved in the SSL layer.

|improve this answer|||||
  • Is HAProxy comparable to apache http performance?Also does it integrate well with Tomcat, especially if I set up cluster? – Jim Nov 27 '12 at 7:24
  • @Jim That's a bit of an apples-to-oranges comparison, especially with HAProxy working only at the TCP layer. What kind of integration with Tomcat are you looking for? – Shane Madden Nov 27 '12 at 16:36
  • I am interested in using Tomcat cluster and haProxy in front. Does it work as well as Apache with Tomcat? – Jim Nov 28 '12 at 9:20
  • @Jim Sure - since Tomcat's still terminating the SSL, it's got essentially the same options available as connecting directly to Tomcat. – Shane Madden Nov 29 '12 at 5:30

Another option is to have a look at pound http://www.apsis.ch/pound.

This actually does https offloading as well. Setting up pound is trivial and is also very lightweight and offers good performance.

Cheers, dexter

PS: I thought apache had a load balancing module, but again, apache will not have the performance in load balancing as pound.

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.