I'd like to put some load balancers in front of a set of TPS instances (acting as a single virtual TPS) and in front of the CAs that would issue the actual certs. The balancers would be more for reliability and uptime than performance. Are there any limitations I need to know about? Is it possible to have multiple TPS instances talk to a single TKS instance? /B
bob.lord@gmail.com wrote:
I'd like to put some load balancers in front of a set of TPS instances (acting as a single virtual TPS) and in front of the CAs that would issue the actual certs. The balancers would be more for reliability and uptime than performance. Are there any limitations I need to know about? Is it possible to have multiple TPS instances talk to a single TKS instance? /B
------------------------------------------------------------------------
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
You can have load balancers in front of TPS instances. Two things I'd like to call to your attention: 1. Between ESC and TPS, HTTP chunked encoding is used, so your load balancer needs to support that. 2. The phone home url on the ESC needs to point to the load balancer. Christina
On Fri, Sep 12, 2008 at 10:47 AM, Christina Fu <cfu@redhat.com> wrote:
bob.lord@gmail.com wrote:
I'd like to put some load balancers in front of a set of TPS instances (acting as a single virtual TPS) and in front of the CAs that would issue the actual certs. The balancers would be more for reliability and uptime than performance. Are there any limitations I need to know about? Is it possible to have multiple TPS instances talk to a single TKS instance? /B
------------------------------------------------------------------------
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
You can have load balancers in front of TPS instances. Two things I'd like to call to your attention:
1. Between ESC and TPS, HTTP chunked encoding is used, so your load balancer needs to support that. 2. The phone home url on the ESC needs to point to the load balancer.
The load balancers are (usually) transparent, so I'd still point them to tps.corp.example.com, and the load balancer would deal with the connection consistency, right? Let me know if I'm not thinking about this right. -Bob
Bob Lord wrote:
On Fri, Sep 12, 2008 at 10:47 AM, Christina Fu <cfu@redhat.com <mailto:cfu@redhat.com>> wrote:
bob.lord@gmail.com <mailto:bob.lord@gmail.com> wrote:
I'd like to put some load balancers in front of a set of TPS instances (acting as a single virtual TPS) and in front of the CAs that would issue the actual certs. The balancers would be more for reliability and uptime than performance. Are there any limitations I need to know about? Is it possible to have multiple TPS instances talk to a single TKS instance? /B
------------------------------------------------------------------------
_______________________________________________ Pki-users mailing list Pki-users@redhat.com <mailto:Pki-users@redhat.com> https://www.redhat.com/mailman/listinfo/pki-users
You can have load balancers in front of TPS instances. Two things I'd like to call to your attention:
1. Between ESC and TPS, HTTP chunked encoding is used, so your load balancer needs to support that. 2. The phone home url on the ESC needs to point to the load balancer.
The load balancers are (usually) transparent, so I'd still point them to tps.corp.example.com <http://tps.corp.example.com>, and the load balancer would deal with the connection consistency, right? Let me know if I'm not thinking about this right.
Not sure if my scanrio is the same, but sometime ago, I tried to configure a load balancer between two CA instances. Ex the load balancer was trying to send traffic to ca1.example.com and ca2.example.com. The client saw it as a man in the middle attack (as the client was going to ca.example.com). Tried different things to make it work but without success. -Satish.
-Bob
------------------------------------------------------------------------
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
participants (4)
-
Bob Lord -
bob.lord＠gmail.com
-
Christina Fu -
Satish Chetty