On Fri, Mar 22, 2013 at 6:43 AM, Eswaramoorthy R <[email protected]>wrote:
> so can we recypher the traffic to tomcat servers using haproxy..? > > any of the following solutions is ok.. > > 1)Haproxy with HTTPS and other two servers with normal HTTP > 2)Haproxy with HTTPS and other two servers also with HTTPS. > > But which of the above solution works ..? > both will works. > I don have any previous experience with Haproxy..Am new to this...Please > pardon me if this is a silly question.. > this is not an HAProxy problem or lack of experience, this is related to architecture... Just decide what you *really* need, then choose the right product. HAProxy or an other one. Don't do the opposite: choose the product then try to arrange your needs to fit the product you chose... > ~Eswar > > > On Fri, Mar 22, 2013 at 10:40 AM, Baptiste <[email protected]> wrote: > >> no, as per our explanation and your request, there is a single cert in >> HAProxy. >> Unless you want to recypher traffic to your tomcat servers. >> >> Baptiste >> >> >> On Fri, Mar 22, 2013 at 5:51 AM, Eswaramoorthy R <[email protected]>wrote: >> >>> Thanks all so much for your help and also for updating the article:-) >>> >>> I have a doubt...As per your explanation there are totally 3 >>> certificates placed..They are >>> >>> 1)haproxy.pem >>> 2)cert1 >>> 3)cert2 >>> >>> Can you please say to which server each certificate belongs to..? Below >>> is my sample architecture for your reference... >>> >>> [image: Inline image 1] >>> ~~~~~ >>> Eswar >>> >>> >>> On Fri, Mar 22, 2013 at 12:54 AM, Robin Lee Powell < >>> [email protected]> wrote: >>> >>>> On Thu, Mar 21, 2013 at 08:02:03PM +0100, Baptiste wrote: >>>> > > I actually started with >>>> > > >>>> http://blog.exceliance.fr/2012/09/10/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/ >>>> > > , but that's out of date; the sni options have changed. >>>> > >>>> > >>>> > Hi Robin >>>> > >>>> > I fixed the article today. >>>> >>>> :D Thanks so much! >>>> >>>> -Robin >>>> >>>> >>> >> >
<<image.png>>
