> I have read the topic, and in general people use a fronted LB than handles > SSL.
I'm not sure about that. > First I want to know the impact in performance in each case (certificate in > LB or application server). Only measurement could provide a reasonable performance comparison. > Here we use IIS so, could we use IIS to manage SSL for our 2 node -CAS > cluster? Sure. You could either install the certificate for the VIP hostname on each host in the cluster (what we do), or install a self-signed certificate on each node with the real certificate on the LB. M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
