PDA

View Full Version : advice on certificates when load-balancing

Randy
18th October 2006, 12:39
Hi people,

If ispconfig is setup the way as decribed in "How To Set Up A Loadbalanced High-Availability Apache Cluster by Falko", Is it then still possible to use ip-based virtual hosting behind a nat ?
E.g. , you are an ISP and register domains for customers. Every customer receives an official ip-address within your own range. If I install my servers load-balanced with one virtual ip, as described in the howto, how will I then be able to give them all their own ssl certificate if I nat all domain addresses to the V-ip?
Maybe I have missed something, still not an expert, so please excuse my ignorance if detected.
Second question, is there a page where I can find instructions on how to install a good anti-virus system for ISP (open-source of-course.... ;-).
Highest regards,

Randy
Randy
19th October 2006, 09:37
Ehh, anybody ?

You can disregard the question about the antivrus, I've noticed that ISpconfig installs all necessary items.

Greetings,

Randy
till
19th October 2006, 09:39
Hi people,

If ispconfig is setup the way as decribed in "How To Set Up A Loadbalanced High-Availability Apache Cluster by Falko", Is it then still possible to use ip-based virtual hosting behind a nat ?

ISPConfig does not provide IP based virtual hosts at all.

E.g. , you are an ISP and register domains for customers. Every customer receives an official ip-address within your own range. If I install my servers load-balanced with one virtual ip, as described in the howto, how will I then be able to give them all their own ssl certificate if I nat all domain addresses to the V-ip?

You will need one external IP for every internal IP if you want to have SSL based vhosts on port 443.
Randy
19th October 2006, 10:05
ISPConfig does not provide IP based virtual hosts at all.



You will need one external IP for every internal IP if you want to have SSL based vhosts on port 443.

Which means that I have to list all bound internal addresses in ispconfig to tell apache to listen on them? But is then still name based virtual hosting?
Do you know if it works this way also with the virtual ip's generated by altramonkey? Thanks!!!
Randy
till
19th October 2006, 10:08
Which means that I have to list all bound internal addresses in ispconfig to tell apache to listen on them?

yes.

But is then still name based virtual hosting?

yes.

Do you know if it works this way also with the virtual ip's generated by altramonkey?

Never tried that.
falko
19th October 2006, 14:43
E.g. , you are an ISP and register domains for customers. Every customer receives an official ip-address within your own range. If I install my servers load-balanced with one virtual ip, as described in the howto, how will I then be able to give them all their own ssl certificate if I nat all domain addresses to the V-ip?

I haven't tried this setup with ISPConfig, but I think you must use the virtual IP address in ISPConfig.