|
Well, lvs is a set of patches to the linux kernel. I suspect that if you
tried to build it on any of the BSDs you'd have some problems ;)
On Tue, 17 Oct 2000, Jacob W Anderson wrote:
> hey
>
> anyone out there ever tried to compile lvs on OpenBSD or FreeBSD?
>
> --Jake
>
> > -----Original Message-----
> > From: David D.W. Downey [mailto:david.downey@xxxxxxxx]
> > Sent: Monday, October 16, 2000 12:51 PM
> > To: Joseph Mack
> > Cc: Linux Virtual Server Mail List
> > Subject: Re: Verisign Certs
> >
> >
> > Actually what the set up is is as follows
> >
> > we have a number of servers all named like ws-01.qixo.com, ws-02.qixo.com
> > ect ect. They also have the name ws-01.qixo.org|net assigned to them as
> > well. (Internal reasonings, don't ask :))
> >
> > Now, the VIP is assigned www.qixo.com|net|org in the DNS server
> > (for obvious
> > reasons). We have NO httpd running on any of the front end nodes.
> > Everything
> > is totally backend. (No default http page at the moment if any of the real
> > servers are dead)
> >
> > Now, since the VIP is named .org,.com,.net and the front end
> > nodes are named
> > vs-00 and vs-01.qixo.org how would I work through this?
> >
> > Example: client surfs in on www.QIXO.com which is, of course, either vs-01
> > or vs-00.qixo.com (whose base name is really vs-XX.qixo.org to
> > tha machine).
> > The LVS feeds the request to any of the backend servers who are named
> > ws-XX.qixo.org (but which all have a /etc/hosts entry for their
> > IP but named
> > .com).
> >
> > We have like 40 domains all told assigned to the single VIP. I
> > take it then
> > that I would ahve to redo the DNS and LVS to assign different IPs to the
> > different domains rather than feeding them all through 1? That I can
> > understand.
> >
> > BUT, the certificates would actually be loaded from the real servers
> > comprising the cluster correct? If so, how do you assign multiple
> > certs on a
> > single machine that all feeds to the same directory but via different
> > <Virtual Host> entries in the httpd.conf?
> >
> > (Hope that this is clear enough on what I'm trying to do. Sometimes my
> > explaination skills are on the downside. :-/)
> >
> >
> >
> > ----- Original Message -----
> > From: Joseph Mack <mack.joseph@xxxxxxx>
> > To: David D.W. Downey <david.downey@xxxxxxxx>
> > Cc: Linux Virtual Server Mail List <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
> > Sent: Monday, October 16, 2000 12:37 PM
> > Subject: Re: Verisign Certs
> >
> >
> > > "David D.W. Downey" wrote:
> > > >
> > > > Hey all,
> > > > The company is looking into adding on a Verisign certificate. Are
> > there
> > > > any issues with this?
> > > > At the moment the one thing I've had trouble with in this is that the
> > server
> > > > handles multiple domains coming through the VIP. How would I handle
> > getting
> > > > ALL the domains their own certificate?
> > >
> > > I take it you don't mean how to get a certificate from Verisign
> > (ans=fill
> > in
> > > one of the worst html forms on the internet)
> > >
> > > I assume you mean something like "what do you need certificate
> > wise to set
> > > up lots of https sites". You need a certificate for each website. The
> > > certificate is for the name, not the IP. You have multiple LVS
> > real-servers
> > > all with the same name, all using copies of the same certificate. Before
> > you
> > > spend all your money, set up some self-signed certificates from the
> > > Snake Oil Co.
> > >
> > > Joe
> > > --
> > > Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
> > > contractor to the National Environmental Supercomputer Center,
> > > mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA
> > >
> >
> >
> >
> >
>
>
>
>
--
Michael D. Jurney
mike@xxxxxxxxxx
|
