How to load balance SSL sites with haproxy in between?

Hello,

I ran into quite a delima, I need to add SSL to a few sites that I'm load balancing and I'm kinda stumped how to do it with the way my network is setup. I created a network diagram to try to illustrate the way I designed my network's setup.

http://img92.imageshack.us/img92/6599/networklayoutjy7.jpg

Note: If the image is unavailable please let me know and I will re- post it.

Simply how it works is when an HTTP request is made from someone on the internet it hits the router/firewall first which is also where all the public IP addresses are configured. The HTTP request is then passed onto the load balancer which is now in my private network. Based on which web server is available and has the least weight currently on it then the request will be sent there then the response is sent back to the load balancer and back out through the router.

Now that I need to add SSL to the setup I'm kinda stumped on how to do that. I've read that each SSL certificate requires either its own IP address or to be on its port number. I can add as many IP addresses as I want to my router so thats not a problem, I wouldn't mind doing that but how would I configure my to serve the HTTPS requests? I figured I would just open up the HTTPS port on my router, forward it to the load balancer the same way I'm doing HTTP requests and somehow put each SSL certificate on each web server which seems logical to me but I'm not clear on the configuring the SSL certificates on each of the private web servers with the way this is.

Has anyone here done a setup like this before? I guess I seem very unsure of myself because I this is my first time actually setting up an HTTPS site and to make it more complicated its a clustered setup heh.

Any comments, suggestions, help, anything is greatly appreciated :)

Thanks,
- Jake Received on 2007/12/14 05:48