LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: multiple VIP's on a single cluster?

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: multiple VIP's on a single cluster?
Cc: dvl@xxxxxxxxxx
From: "Matthew S. Crocker" <matthew@xxxxxxxxxxx>
Date: Thu, 5 Jul 2001 09:07:50 -0400 (EDT)
On Thu, 5 Jul 2001, Joseph Mack wrote:
> 1. A director can forward any number of VIPs. They're all independant.
> 
> 2. https certificates are by url name, not by IP. You can have any number
> of certificates on a real-server.

incorrect,  SSL certs are labelled with the URL name but the SLL session
is established before any HTTP requests. So, you can only have one SSL
cert tied to an IP address.  If you want to have a single host handle
multiple SSL certs you need a seperate IP for each cert.  You also need to
setup the director to handle all the IP's

named based HTTP DO NOT WORK with SSL because the SSL cert is sent BEFORE
the HTTP so the sever won't know what cert to send.

-Matt

-- 
----------------------------------------------------------------------
Matthew S. Crocker 
Vice President / Internet Division         Email: matthew@xxxxxxxxxxx
Crocker Communications                     Phone: (413) 587-3350
PO BOX 710                                 Fax:   (413) 587-3352
Greenfield, MA 01302-0710                  http://www.crocker.com
----------------------------------------------------------------------



<Prev in Thread] Current Thread [Next in Thread>