[users@httpd] reverse proxy, balancing and ssl client certificate authentication

[Jan Vávra <va...@602.cz>]

Hello,
  I have an idea how to setup Apache for doing load balancer based on 
mod_proxy and mod_balance modules. But in my case the backend server 
requires ssl client certificate authentication and therefore the Apache 
Server cannot terminate the ssl connection.

I do no need http session cookie stickyness. The application is 
stateless. Can I somehow configure Apache as a transparent balancer?

Or I should use even another software - squid, iptables?

The backend application is a web service running on Tomcat.

Jan.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] reverse proxy, balancing and ssl client certificate authentication

[Tom Evans <te...@googlemail.com>]

On Thu, Oct 17, 2013 at 12:52 PM, Jan Vávra <va...@602.cz> wrote:
> Hello,
>  I have an idea how to setup Apache for doing load balancer based on
> mod_proxy and mod_balance modules. But in my case the backend server
> requires ssl client certificate authentication and therefore the Apache
> Server cannot terminate the ssl connection.
>
> I do no need http session cookie stickyness. The application is stateless.
> Can I somehow configure Apache as a transparent balancer?
>
> Or I should use even another software - squid, iptables?
>
> The backend application is a web service running on Tomcat.
>
> Jan.
>

I would use haproxy for this. I don't think (happy to be wrong) that
you can pass through unterminated SSL to a backend with
mod_proxy_http.

Cheers

Tom

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org