topic Re: LD417 + SSL + virtual server question in Application Networking

LD417 + SSL + virtual server question

bhhouston — Mon, 20 Dec 2004 17:18:14 GMT

We have 2 real servers behind one v-server and we have recently installed SSL on the 2 reals. I have configured my LD for port 443 and have no trouble gaining access through the virtual address.

My questions: Is it necessary to have a SSL certificate for the VIP and if so, where do we install it?

Related question: Will a "probe...http" statement work with my port 443 https real servers?

Thanks, Ben

Re: LD417 + SSL + virtual server question

seilsz — Mon, 20 Dec 2004 23:31:09 GMT

Ben,

You would only need a certificate if the LD was terminating the ssl traffic, which it is not capable of doing. You will need to have certificates installed on the 'real' servers (or the ssl termination device).

The http probe with not work with ssl services, since the traffic on port 443 is encrypted.

~Zach

Re: LD417 + SSL + virtual server question

bhhouston — Tue, 21 Dec 2004 13:20:24 GMT

Thanks, Zach. That's the information I needed.

A follow-up question: Without the http probe, how do I insure that my backup server comes into service in a reasonable time frame if one of my reals drops off?

Ben

Re: LD417 + SSL + virtual server question

seilsz — Tue, 21 Dec 2004 18:57:17 GMT

You can use a tcp probe to port 443. Granted this is less telling that actually GETting the webpage, but it's better than just an icmp ping.

~Zach