Re: [lvs-users] SSL persistence/offloading and IPVS-TUN

[David Black <dave@xxxxxxxxxxx>]

Update: I chose to use Squid with SSL enabled and in accelerator mode to
do this.  Tested and works.  Similar to what's on the following page,
but using https_port for incoming connections:

http://wiki.squid-cache.org/SquidFaq/ReverseProxy

Since we already had one, I have Squid load up our wildcard SSL cert.
The combination of the wildcard cert and having Squid look at inbound
HTTP headers when deciding what real server (cache_peer type parent in
Squid's config) makes possible a limited SSL-enabled virtual hosting
capability, within the domain covered by the cert.

Dave