httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jorge Medina" <jmed...@e-dialog.com>
Subject [users@httpd] Can I configure a load balancer using https ?
Date Tue, 08 Jul 2008 21:39:45 GMT
Hi,    

   Is it possible to configure Apache as a reverse proxy that will pass
a request to any of the servers in a cluster using HTTPS?

   Basically I want to know if it possible to configure Apache as a
reverse proxy (load balancer) that won't do any decryption, just a
pass-trough of the request to any of the server in a cluster. I want to
use the same certificate on each server behind the balancer (I think I
need to declare a <VirtualHost> since the certificate won't match the
name of each machine in the cluster)

   Is this configuration possible at all? The figure below illustrates
what I want to achieve.


                  request
                     |
                    https
                     |
		---------------------
           |Apache Reverse Proxy | https://www.example.com
           |     Balancer        |
            ---------------------
                /    |    \
              https https https
              /      |      \
             /       |       \
    ----m1----    ---m2----   ----m3----    m1.eng.example.com
   | Apache  |   | Apache  | | Apache   |   m2.eng.example.com
   | Virtual |   | Virtual | | Virtual  |   m3.eng.example.com ...
    ----------    ---------   ----------    mN.eng.example.com

m1, m2, m3...mN  are configured to process requests for
https://www.example.com in a <VirtualHost> section.

   I have done extensive search on the web but I can't seem to get with
the answer. The more reputable sources I have found indicate it is not
possible
(http://www.onjava.com/pub/a/onjava/2001/09/26/load.html?page=2) but
this seems to be the case only if I want the load balancing based on
information on the encrypted data. Such source indicate to use HTTP
behind the balancer.

   If it is possible, I would appreciate any pointers on HOW to do it. 

   Thanks

-Jorge
   

    

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message