Re: Suggestions needed for best practice to setup a HTTP and HTTPS load balancing

HTTPS is getting configured like HTTP except that you need to 
configure SSL termination or proxy modus on top of what you have done 
for HTTP. Please have a look at some examples at 
http://community.brocade.com/adi - a good one is:

http://community.brocade.com/home/docs/DOC-1529

something more general:

http://community.brocade.com/home/docs/DOC-1518

The first one covers as well cookie based persistency together with 
HTTPS which is something you might need.

Cheers,

Oliver

At 09:12 14.08.2009, jith wrote:
>Hello,
>Thanks in advance for your valuable time and suggestions.  I have 
>been a passive listener over a year and I am interested to watch 
>each conversations bring up in this mailing list. Please bear with 
>me if my questions are too basic and this is my first post.
>
>I am looking for a best practice and secured setup for a "web server 
>load balancing(HTTP/HTTPS)".
>
>I have a ServerIron 4G SSL behind the Checkpoint firewall inside a 
>data center.  Behind the ServerIron, i have 5 webserver running on 
>Windows server 2008.  At present, i am doing http_load balancing and 
>forth coming days my customer is willing to do https_load balancing 
>also.  For https_based load balancing, my customer will be giving 
>the certificate which i need to insert into the ServerIron in 
>termination mode.
>
>Below are the present configuration for http_based load balancing:
>//
>ver 10.2.00aTI2
>!
>global-protocol-vlan
>!
>context default
>!
>csw-rule "r11" url pattern "/regtr"
>csw-rule "r12" url pattern "/Updt"
>!
>csw-policy "p1"
>  match "r11" forward 1023
>  match "r12" forward 0
>  default forward 1023
>!
>server real foo x.x.x.x
>  port http
>  port http url "HEAD /"
>  port http group-id  0 0
>!
>server real foo_bar x.x.x.x
>  port http
>  port http url "HEAD /"
>  port http group-id  0 0
>!
>server real foobar x.x.x.x
>  port http
>  port http url "HEAD /"
>  port http group-id  1023 1023
>!
>server real foo-bar x.x.x.x
>  port http
>  port http url "HEAD /"
>  port http group-id  0 0
>!
>server virtual foo_test x.x.x.x
>  predictor round-robin
>  port http
>  port http csw-policy "p1"
>  port http csw
>  bind http foo-bar http foo http foo_bar http foo-bar http
>
>Looking for https_based load balancing suggestions and your comments 
>on a best practice way.  Please let me know if you have any 
>clarification on the same.
>
>Thanks for your time!!!
>
>-Sujith
>
>
>
>
>
>_______________________________________________
>lb-l mailing list
>[email protected]
>http://vegan.net/mailman/listinfo/lb-l
>Searchable Archive: http://vegan.net/lb/archive
>http://lbdigest.com Load Balancing Digest
>http://lbwiki.com Load Balancing Wiki


_______________________________________________
lb-l mailing list
[email protected]
http://vegan.net/mailman/listinfo/lb-l
Searchable Archive: http://vegan.net/lb/archive
http://lbdigest.com Load Balancing Digest
http://lbwiki.com Load Balancing Wiki