Re: About Apache-SSL configuration

Hajime Hoshi wrote:

>Hi All,
>
>I try to construct the https loadbalancing
>using Apache/1.3.26 Ben-SSL/1.48 (Unix) mod_backhand/1.2.1.
>
>-----------------------------------------
>Figure 1:
>	Client ------> Server1 -----> Server2
>		  https(443)	 https(443)
>-----------------------------------------
>
>At first, I tried to configure like Figure1.
>but I failed because of following errors
>
>http error log:
>[Fri Sep 10 21:30:12 2004] [error] SSL_accept failed
>[Fri Sep 10 21:30:12 2004] [error] error:1407609C:SSL
>routines:SSL23_GET_CLIENT_HELLO:http request
>
>
>Then I attempted to Figure 2.
>-----------------------------------------
>Figure 2:
>	Client ------> Server1 -----> Server2
>		  https(443)	 http(8081)
>  
>
Figure 1 isn't supported in the public mod_backhand.

We did implement this for a client, and I believe they are in the
process of deciding whether to push the implementation changes back into
the community.

Figure 2 is the typical approach (as it is much much cheaper). As you
own both endpoints, securing communication betweent the two servers
would be better done using IPsec.

Check the /backhand/ page to make sure that the servers believe they are
advertising the correct ports (IP:8081), If they are not, then flip the
Listen lines or explicitly provide the IP:port explicitly using the 3
arg version of MulticastStats.

Also, make sure you can get to http://ip:8081/ using your browser.

-- 
// Theo Schlossnagle
// Principal Engineer -- http://www.omniti.com/~jesus/
// Postal Engine -- http://www.postalengine.com/
// Ecelerity: fastest MTA on Earth