HAProxy NGInx SSL setup
- by Niclas
I've been looking around different setups for a server cluster supporting SSL and I would like to benchmark my idea with you.
Requirements:
All servers in the cluster should be under the same full domain name. (http and https)
Routing to subsystems is done on URI matching in HA proxy.
All URIs have support for SSL support.
Wish:
Centralizing routing rules
---<----http-----<--
| |
Inet -->HA--+---https--->NGInx_SSL_1..N
|
|
+---http---> Apache_1..M
|
+---http---> NodeJS
Idea: Configure HA to route all SSL traffic (mode=tcp,algorithm=Source) to an NGInx cluster turning https traffic into http. Re-pass the http traffic from NGInx to the HA for normal load-balancing which performs load balancing based on HA config.
My question is simply: Is this the best way to to configure based on requirements above?