You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@cloudstack.apache.org by Chip Childers <ch...@sungard.com> on 2013/02/15 16:53:59 UTC

[DISCUSS] SSL Termination on the Virtual Router

Hi all,

Is anyone working on (or know if it's been done already) enabling SSL
termination for HA Proxy on the VRs?

-chip

Re: [DISCUSS] SSL Termination on the Virtual Router

Posted by Chip Childers <ch...@sungard.com>.

Thanks. I guess I confused dev with stable. We should probably
consider doing it as an option once it's in a stable release.

On Feb 15, 2013, at 12:36 PM, Chiradeep Vittal
<Ch...@citrix.com> wrote:

> HAProxy does not support it natively (although the latest development
> snapshot is working towards it). The recommended way is to run a proxy
> (nginx) to terminate the SSL
> And a proxy behind HAProxy if you want SSL to the backend servers.
> So Internet -> [nginx] -> [HAProxy] -> [nginx]-> backend
>
> On 2/15/13 7:53 AM, "Chip Childers" <ch...@sungard.com> wrote:
>
>> Hi all,
>>
>> Is anyone working on (or know if it's been done already) enabling SSL
>> termination for HA Proxy on the VRs?
>>
>> -chip
>
>

Re: [DISCUSS] SSL Termination on the Virtual Router

Posted by Chiradeep Vittal <Ch...@citrix.com>.

HAProxy does not support it natively (although the latest development
snapshot is working towards it). The recommended way is to run a proxy
(nginx) to terminate the SSL
And a proxy behind HAProxy if you want SSL to the backend servers.
So Internet -> [nginx] -> [HAProxy] -> [nginx]-> backend

On 2/15/13 7:53 AM, "Chip Childers" <ch...@sungard.com> wrote:

>Hi all,
>
>Is anyone working on (or know if it's been done already) enabling SSL
>termination for HA Proxy on the VRs?
>
>-chip