RE: How to handle SSL traffic

[Peter Mueller <pmueller@xxxxxxxxxxxx>]

> > Currently we have SSL-certificates per real server.
> 
> Why?  You only need a certificate per domain.  You should be 
> able to copy it to as many servers as you want.  I had a SSL 
> IPs load balanced using LVS-TUN with two computers, using the 
> same certificate, and nothing complained about the certificate.

I didn't think we could use the same key in an LVS-DR solution?

Client -> www SSL syn
RSxx -> Client ack
Client --> [..? Who is this and why are they sending me a return SSL ACK?]
Client --> www SSL syn
Etc.