Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Message-ID: <BAY174-W27AE35BAC7748646FF416DA2ED0@phx.gbl>
Content-Type: multipart/alternative;
	boundary="_e506c0ff-5b2e-48b9-859d-0d8a192b16b2_"
From: Joey Samonte <csharpdeveloper@hotmail.com>
To: "dev@couchdb.apache.org" <dev@couchdb.apache.org>
Subject: RE: Can clustering be setup between nodes that only accept SSL
 connections?
Date: Thu, 25 Aug 2016 10:15:21 +0000
Importance: Normal
In-Reply-To: <4239B8C7-ED3F-4A27-A56E-539ED3FD2C6D@apache.org>
References: 
 <BAY174-W388A725335350030152EFCA2EA0@phx.gbl>,<4239B8C7-ED3F-4A27-A56E-539ED3FD2C6D@apache.org>
MIME-Version: 1.0
archived-at: Thu, 25 Aug 2016 10:15:31 -0000

--_e506c0ff-5b2e-48b9-859d-0d8a192b16b2_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

We are currently using nginx sir as reverse proxy in front of CouchDB
=20
> From: rnewson@apache.org
> Subject: Re: Can clustering be setup between nodes that only accept SSL c=
onnections?
> Date: Thu=2C 25 Aug 2016 11:07:29 +0100
> To: dev@couchdb.apache.org
>=20
> Yes=2C couchdb can be configured that way but my recommendation is to put=
 something like haproxy in front instead. The native ssl support in Erlang =
has a buggy history in my experience=2C though I believe 18.x is working qu=
ite nicely. Further=2C with couchdb 2.0=2C you'll want a round-robin loss b=
alancer in front of them to fully enjoy the clustered fault tolerance.=20
>=20
> For < 2.0=2C you just need to configure the httpsd daemon and comment out=
 the httpsd one. For 2.0=2C I'll have to research a little as I'm not sure =
the chttpd service is as rainy disabled.=20
>=20
> Sent from my iPhone
>=20
> > On 24 Aug 2016=2C at 21:08=2C Joey Samonte <csharpdeveloper@hotmail.com=
> wrote:
> >=20
> > Good day=2C
> >=20
> > SSL is a must for us to secure our data. Can the CouchDB nodes in the c=
luster only allow https=2C for example=2C on port 6984?
> >                        =20
>=20
 		 	   		  =

--_e506c0ff-5b2e-48b9-859d-0d8a192b16b2_--