Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
litespeed_wiki:lslb:basic_config_ssl [2019/02/08 19:05] Lisa Clarke Copyediting |
litespeed_wiki:lslb:basic_config_ssl [2019/02/08 19:07] Lisa Clarke [Map Domains to Both Listeners] |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| In this guide we will explain how to set up following 3 scenarios: | In this guide we will explain how to set up following 3 scenarios: | ||
| - | # SSL offloading, in which ADC-to-end-user connections will be available as both HTTP and HTTPS, but the ADC will connect to the backend server with HTTP. (This scenario should only apply if both servers are in a private network to reduce server load. It's not recommended if both servers are connected via public network.) | + | - SSL offloading, in which ADC-to-end-user connections will be available as both HTTP and HTTPS, but the ADC will connect to the backend server with HTTP. (This scenario should only apply if both servers are in a private network to reduce server load. It's not recommended if both servers are connected via public network.) |
| - | # Keep an SSL connection between the ADC and the backend, and make ADC-to-end-user connections available as both HTTP and HTTPS. | + | - Keep an SSL connection between the ADC and the backend, and make ADC-to-end-user connections available as both HTTP and HTTPS. |
| - | # HTTP to HTTP, and HTTPS to HTTPS only. | + | - HTTP to HTTP, and HTTPS to HTTPS only. |
| **NOTE**: For this example, the backend server IP is ''.114'' and the ADC server IP is ''.211'' | **NOTE**: For this example, the backend server IP is ''.114'' and the ADC server IP is ''.211'' | ||
| Line 78: | Line 78: | ||
| {{:litespeed_wiki:lslb:adc-ssl13.png|}} | {{:litespeed_wiki:lslb:adc-ssl13.png|}} | ||
| - | # If you want all traffic between the ADC and the backend to be on HTTPS, then map the **HTTPS** vhost to **both** listeners. | + | - If you want all traffic between the ADC and the backend to be on HTTPS, then map the **HTTPS** vhost to **both** listeners. |
| - | # If you want all traffic between the ADC and the backend to be on HTTP, then map the **HTTP** vhost to **both** listeners. | + | - If you want all traffic between the ADC and the backend to be on HTTP, then map the **HTTP** vhost to **both** listeners. |
| - | # If you want traffic separately proxied, then map the **HTTP** vhost to the **HTTP** listener, and map the **HTTPS** vhost to the **HTTPS** listener. | + | - If you want traffic separately proxied, then map the **HTTP** vhost to the **HTTP** listener, and map the **HTTPS** vhost to the **HTTPS** listener. |
| ===== Additional Note ===== | ===== Additional Note ===== | ||