0

I want set up AWS load balancing on my EC2 instance, but I have a kind of dynamic SSL certificate management on it, and because of that, I need use the server's SSL certificate instead of setting up a certificate on the load balancer. Is this possible?

  • 1
    What kind of LB you use? DO the LB have option to balance on TCP instead of SSL/TLS? – Romeo Ninov Jun 18 '19 at 12:50
  • Im using AWS LB. Yes, it does. – adrianosmateus Jun 18 '19 at 13:00
2

If you want to terminate SSL/TLS connection on the web servers (and not on the LB(s) ) you can set LB to balance TCP connection and not SSL/TLS. Of cource this have some disadvantages but based on your requirements this seems to be the only way.

BTW if you have only one web server/service it is strange for me you want to balance it. LB is normally applied when you have more than one.

  • 1
    IMHO you should not mix 80 and 443 ports. You can create two balances, one for each port. – Romeo Ninov Jun 18 '19 at 13:45
  • 1
    Right. Should i do this making the listener at tcp 80 point to the instance's 80 and listener tcp 443 point to the instance's 443? – adrianosmateus Jun 18 '19 at 17:33
  • 1
    Correct. As port 80 do not need termination you can use http instead of tcp – Romeo Ninov Jun 18 '19 at 17:42
  • 1
    @adrianosmateus, this mean some mismatch of DNS cache records. Please create new question about this. – Romeo Ninov Jun 18 '19 at 18:47
  • 1
    I fixed the DNS issue. Thanks for the help! – adrianosmateus Jun 18 '19 at 19:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.