Re: SSL server and certificate for more than 1 host

Hallo Vitor,

Im using the 23.0.2 and 5.1.5 on the SSL.

I think the post from Andrew is very correct, lots of possibilities to
use a SSL accelerator and persistence, the config will give us a
better overview.

br
Robert

On 14 June 2010 18:43, Jose Vitor Barreiro <[email protected]> wrote:
> Hello Robert,
>
> I am using http to on the backend to VIP. Witch firmware versions are you=
 using?
> SSL and AOS?
>
> Best Regards
> Vitor Barreiro
>
>
>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On Behalf Of=
 robert rauch
> Sent: segunda-feira, 14 de Junho de 2010 17:08
> To: Load Balancing Mailing List
> Subject: Re: [load balancing] SSL server and certificate for more than 1 =
host
>
> Hallo Vitor,
>
> We are also using the AS2424-ssl to off load ssl traffic, we have
> acquired a wild card certificate that can be used as often as we like.
> On the backend SSL to VIP we dont encrypt, that make it easy to work
> with stickiness or persistence.
>
> Normal persistence with HTTPS, use group metric hash and it also
> possible to use the thash, under the services, /cfg/slb/vip xxx/ser
> https that will hash the sip+sport for extra persistence.
>
> hope this helped
> Robert
>
>
>
>
> On 14 June 2010 11:19, Jose Vitor Barreiro <[email protected]> wro=
te:
>> Hi,
>>
>>
>>
>> Does anyone have experience with one AAS2424-SSL using one SSL certifica=
te
>> for more than one host?
>>
>>
>>
>> I have a costumer that has focused on the ssl certificate five hosts and
>> with this situation we are having problems with persistence for SSL traf=
fic
>> (traffic =A0between the SSL module and http servers).
>>
>>
>>
>>
>>
>> Best Regards
>>
>>
>>
>> Vitor barreiro
>>
>>
>>
>>
>>
>>
>>
>> AVISO DE CONFIDENCIALIDADE: Este e-mail e quaisquer ficheiros inform=E1t=
icos
>> com ele transmitidos s=E3o confidenciais e destinados ao conhecimento e =
uso
>> exclusivo do respectivo destinat=E1rio, n=E3o podendo o conte=FAdo dos m=
esmos ser
>> alterado. Caso tenha recebido este e-mail indevidamente, queira informar=
 de
>> imediato o remetente e proceder =E0 destrui=E7=E3o da mensagem.
>>
>> CONFIDENTIALITY WARNING: This e-mail and any files transmitted with it a=
re
>> confidential and intended solely for the use of the individual or entity=
 to
>> whom they are addressed. Their contents may not be altered. If you have
>> received this e-mail in error please notify the sender and destroy it
>> immediately.
>>
>> =A0P Antes de imprimir este mail, pense bem se tem mesmo que o fazer. Pr=
oteja
>> o meio ambiente.
>>
>> _______________________________________________
>> lb-l mailing list
>> [email protected]
>> http://vegan.net/mailman/listinfo/lb-l
>> Searchable Archive: http://vegan.net/lb/archive
>> http://lbdigest.com Load Balancing Digest
>> http://lbwiki.com Load Balancing Wiki
>>
>>
> _______________________________________________
> lb-l mailing list
> [email protected]
> http://vegan.net/mailman/listinfo/lb-l
> Searchable Archive: http://vegan.net/lb/archive
> http://lbdigest.com Load Balancing Digest
> http://lbwiki.com Load Balancing Wiki
> _______________________________________________
> lb-l mailing list
> [email protected]
> http://vegan.net/mailman/listinfo/lb-l
> Searchable Archive: http://vegan.net/lb/archive
> http://lbdigest.com Load Balancing Digest
> http://lbwiki.com Load Balancing Wiki
>
_______________________________________________
lb-l mailing list
[email protected]
http://vegan.net/mailman/listinfo/lb-l
Searchable Archive: http://vegan.net/lb/archive
http://lbdigest.com Load Balancing Digest
http://lbwiki.com Load Balancing Wiki