LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] Another question while I'm at it about SSL termination o

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] Another question while I'm at it about SSL termination on the director.
From: "prockter@xxxxxxxxx" <prockter@xxxxxxxxx>
Date: Thu, 01 May 2008 16:46:44 +0100
lists wrote:
> At the moment I can do SSL termination with pound, then hand off localy 
> to HaProxy for cookie insertion and load balancing:
> Pound -> HaProxy -> Real Servers
> x.x.x.10:443 -> x.x.x.10:80 -> Real Servers
> 
> But I'd like to do :
> Pound -> LVS -> Real Servers
> x.x.x.10:443 -> x.x.x.10:80 -> Real Servers
I'm curious, why not just go

Pound -> Real Servers ?

What benefit is HAProxy/LVS giving you?  Pound will do most of the 
things I can imagine one would want as long as a single server can 
handle the amount of SSL offload you require.

Using Pound means you loose the client IP from the TCP/IP request (it 
goes into the HTTP headers) which to me is the major benefit of LVS 
based setups rather than HAProxy anyway.

Neil

Please access the attached hyperlink for an important electronic communications 
disclaimer: http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm


<Prev in Thread] Current Thread [Next in Thread>