cancel
Showing results for 
Search instead for 
Did you mean: 

how do you configure appserver for load balancing with ssl certificate?

joe_ferrer
Champ in-the-making
Champ in-the-making

please provide some steps that you used to load balance 2 servers on server 2012 for onbase 15

1 ACCEPTED ANSWER

AdamShaneHyland
Employee
Employee

Hi Joe,

Thanks for the post. 

There are a lot of variables here.  For instance, are you using a software load balancer or a hardware appliance?  Assuming you are using a hardware appliance, the next question depends by what you would like to have encrypted.  Do you need to have end-to-end encryption (ie Client to Load Balancer to Application Server) which is going to add additional overhead of encrypting the traffic or are you ok with the Load Balancer being the encrypted endpoint (ie Client to Load Balancer over HTTPS and Load Balancer to Application Server over HTTP)?

One way of doing this is to get a certificate for your Load Balancer so all Client traffic is encrypted and leave the traffic on the server side between the Load Balancer and the OnBase Application Server unencrypted.  This option would reduce the over head necessary of having to unencrypt the traffic on the Application Server. 

Here are some articles which might help:

Building a Web Farm with IIS Servers

Configuring IIS Web Farm

http://serverfault.com/questions/68753/does-each-server-behind-a-load-balancer-need-their-own-ssl-ce...

Hope this helps.

Take care.

View answer in original post

1 REPLY 1

AdamShaneHyland
Employee
Employee

Hi Joe,

Thanks for the post. 

There are a lot of variables here.  For instance, are you using a software load balancer or a hardware appliance?  Assuming you are using a hardware appliance, the next question depends by what you would like to have encrypted.  Do you need to have end-to-end encryption (ie Client to Load Balancer to Application Server) which is going to add additional overhead of encrypting the traffic or are you ok with the Load Balancer being the encrypted endpoint (ie Client to Load Balancer over HTTPS and Load Balancer to Application Server over HTTP)?

One way of doing this is to get a certificate for your Load Balancer so all Client traffic is encrypted and leave the traffic on the server side between the Load Balancer and the OnBase Application Server unencrypted.  This option would reduce the over head necessary of having to unencrypt the traffic on the Application Server. 

Here are some articles which might help:

Building a Web Farm with IIS Servers

Configuring IIS Web Farm

http://serverfault.com/questions/68753/does-each-server-behind-a-load-balancer-need-their-own-ssl-ce...

Hope this helps.

Take care.