LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

AW: LVS and SSL encapsulation

To: "'lvs-users@xxxxxxxxxxxxxxxxxxxxxx'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: AW: LVS and SSL encapsulation
From: Matthias Krauss <MKrauss@xxxxxxxxxxxxxx>
Date: Mon, 17 Feb 2003 17:29:10 +0100
thx,
thats a good start. Why do i want to do this ?
Because i do not want the iis doing ssl decryption and
i dont wanna pay a cert. for each realserver in my
lvs config.

i used the wrong words, i'm looking for some kind of 
ssl accleration via or with lvs ..

thx
Matthias

-----Ursprüngliche Nachricht-----
Von: nick garratt [mailto:nick-lvs@xxxxxxxxxxxxxx] 
Gesendet: Montag, 17. Februar 2003 17:08
An: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Betreff: Re: LVS and SSL encapsulation


hi

i don't know why you would want to do this, but your best bet is to 
see whether any proxy servers support this mechanism (apache with 
mod_proxy, or squid is a good place to start), that is, receiving a 
HTTPS request, mapping it to a HTTP url, fetch and pass through the 
data.
http://httpd.apache.org/docs/mod/mod_proxy.html#proxypass

situate the proxy in front of the LVS director and have it pass the 
vanilla HTTP request through LVS.that's in essence what you want - a 
single server handling SSL with the actual work load-balanced, right ?

nick

>does anybody has an ideay or knows how i could implement
>some kind of ssl encapsulation on a lvs host which translates from ssl 
>to http so that the webservers behind taks only html and lvs is doing 
>the ssl encryption ? that would be soemthing like the bigip ecommerce 
>controler ?
>
>many thx
>
>Matthias
>
>_______________________________________________
>LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx 
>Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>or go to http://www.in-addr.de/mailman/listinfo/lvs-users


_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx Send
requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://www.in-addr.de/mailman/listinfo/lvs-users


<Prev in Thread] Current Thread [Next in Thread>