Running behind a load balancer?

[kilburn]

I haven't done this before, but this may be a good starting point.

Quote:If you did it on the LB, then the communicaiton between the LB and Web would be cleartext. If you did it on the web boxes, each web box would need to have the ssl certs configured.

Yes, and I would recommend configuring the certificates on all servers.

Quote:Either way though, wouldn't we need to generate custom apache vhost files to listen on that web boxes IP?

It seems like we'd have to modify ispcp to build vhosts for all internal IP's used by the Web boxes, as well as the appropriate static ip's that are routed through the LB's...

It depends on the load balancing solution you use. If your servers are on the same local network, I would use the Direct Routing (DR) approach, where all the service machines use the same IP.

Quote:It seems like it would be nice to only have the statics installed on the LB, and just have one private IP on each Web box. Is that what others have done?

I don't understand this part....