LVS farm and SSL certificates

[Andreas Schiffler <aschiffler@xxxxxxxx>]

Hi there,

I have a quick question regarding the use of SSL certificates in an LVS setup.

In an LVS/DR environment, should I get a certificate for the VIP only or one for each real server or one for all machines in the cluster. The client browser/application will only access URLs with the VIPs hostname, but the actual traffic will come from the real servers - according to verisign (http://www.verisign.com/rsc/wp/certshare/index.html), a load balancing setup requires seperate certificates for each real server (www1., www2, ....) but what about a certificate for the director (www.).

I am a bit unsure about what to do ... any help/tips is appreciated!

Regards
Andreas
 

-- 
|  Andreas Schiffler                    aschiffler@xxxxxxxx  |
|  Senior Systems Engineer    -    Deskplayer Inc., Buffalo  |
|  4707 Eastwood Cres., Niagara Falls, Ont  L2E 1B4, Canada  |
|  +1-905-371-3652 (private)  -  +1-905-371-8834 (work/fax)  |