LD417 + SSL + virtual server question

[bhhouston]

We have 2 real servers behind one v-server and we have recently installed SSL on the 2 reals. I have configured my LD for port 443 and have no trouble gaining access through the virtual address.

My questions: Is it necessary to have a SSL certificate for the VIP and if so, where do we install it?

Related question: Will a "probe...http" statement work with my port 443 https real servers?

Thanks, Ben

[seilsz]

Ben,

You would only need a certificate if the LD was terminating the ssl traffic, which it is not capable of doing. You will need to have certificates installed on the 'real' servers (or the ssl termination device).

The http probe with not work with ssl services, since the traffic on port 443 is encrypted.

~Zach

[bhhouston]

Thanks, Zach. That's the information I needed.

A follow-up question: Without the http probe, how do I insure that my backup server comes into service in a reasonable time frame if one of my reals drops off?

Ben

[seilsz]

You can use a tcp probe to port 443. Granted this is less telling that actually GETting the webpage, but it's better than just an icmp ping.

~Zach