Win a copy of Escape Velocity: Better Metrics for Agile Teams this week in the Agile and Other Processes forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Liutauras Vilda
  • Tim Cooke
  • Paul Clapham
  • Jeanne Boyarsky
Sheriffs:
  • Ron McLeod
  • Frank Carver
  • Junilu Lacar
Saloon Keepers:
  • Stephan van Hulst
  • Tim Moores
  • Tim Holloway
  • Al Hobbs
  • Carey Brown
Bartenders:
  • Piet Souris
  • Frits Walraven
  • fred rosenberger

load balancing

 
Ranch Hand
Posts: 51
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Will hardware load balancers be able to work with SSL requests?


If hardware load balancers cannot read the envrypted messages, how can it maintain the server affinity?
 
Rancher
Posts: 43028
76
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
If the load is big enough to justify hardware load balancers, then you'd normally use them in conjunction with SSL terminators (if the load balancers don't do that to begin with). That way the SSL session ends upon entering the network, and what gets load balanced is just HTTP, not HTTPS.
 
Ghajini Johnson
Ranch Hand
Posts: 51
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Thank you Ulf Dittmer,

I have one more question on the same lines.

If we need to keep the SSL certificates, how do we do that if we have to offload all the SSL stuff at VIP.
 
Ulf Dittmer
Rancher
Posts: 43028
76
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
What is "VIP"? What do you mean by "keep the SSL certificates"? What are you planning to do with those?
 
Ghajini Johnson
Ranch Hand
Posts: 51
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
VIP = virtual IP


I understand that the hardware load balancer creates only a virtual IP for the IPs configured to it. If this is the case, if HTTPS traffic is to be sent, and to maintain server affinity, we need to use SSL decoding right??

how is this configured?
 
Greenhorn
Posts: 11
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Ghajini, explain the scenario cleary. What is the architecture you are having in mind?
 
Ghajini Johnson
Ranch Hand
Posts: 51
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Anil Surya,

second time to you!!

Only abstract concepts are to be discussed here...

Not with architecture diagrams etc..
 
Greenhorn
Posts: 9
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
>> Will hardware load balancers be able to work with SSL requests?

I'm curious to know why you think load balancing hardware would not work with HTTP requests over SLL. It's not far off from asking whether you can use load balancers on Spanish language web sites.
 
Ranch Hand
Posts: 697
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
This article might interest you.

There's a section there on Load Balancing HTTPS Requests...
 
You know it is dark times when the trees riot. I think this tiny ad is their leader:
the value of filler advertising in 2021
https://coderanch.com/t/730886/filler-advertising
reply
    Bookmark Topic Watch Topic
  • New Topic