Logo Questions Linux Laravel Mysql Ubuntu Git Menu
HTML CSS JAVASCRIPT SQL PYTHON PHP BOOTSTRAP JAVA JQUERY R React Kotlin
 

Nginx load balance with upstream SSL

Tags:

nginx

ssl

Trying to setup Nginx as load balancer for https servers. The upstream serves over port 443 with SSL certificates configured. How to configure Nginx, so that the SSL certificate configuration is handled only on the upstream servers and not in the Nginx server?

like image 355
vetti Avatar asked Mar 13 '13 19:03

vetti

People also ask

Is load balancing possible with nginx?

It is possible to use nginx as a very efficient HTTP load balancer to distribute traffic to several application servers and to improve performance, scalability and reliability of web applications with nginx.

Is nginx a l4 load balancer?

nginx can perform both layer 4 load balancing for TCP and UDP, as well as layer 7 HTTP load balancing.

How does nginx resolve upstream?

Upstream Domain Resolve¶ Its buffer has the latest IPs of the backend domain name and it integrates with the configured load balancing algorithm (least_conn, hash, etc) or the built in round robin if none is explicitly defined. At every interval (one second by default), it resolves the domain name.

2 Answers

You need to use Upstream module, and Reverse Proxy module. To reverse proxy to the https upstream, use this

proxy_pass  https://backend;

where backend is an uptream block.

However, if I were doing this, I'd terminate ssl on the nginx server, and make upstream app servers doing what they are good at: serving the content, instead of worrying about ssl encryption/decryption overhead. Setting up ssl termination on nginx is also very simple using the SSL module. A very good case study is also given here.

like image 118
Chuan Ma Avatar answered Sep 20 '22 13:09

Chuan Ma

seems now possible according to https://www.nginx.com/resources/admin-guide/nginx-tcp-ssl-upstreams/ (1.9.4+)

like image 26
ykhrustalev Avatar answered Sep 20 '22 13:09

ykhrustalev
Sign in to Comment

Related questions

Variety of HTTPs errors while communicating to server from Android App
Using nginx to serve content directly out of a redis cache
Passenger and Nginx or Passenger Standalone only?
Nginx per location / pass rewriten uri to proxy_pass
Where is a log file of passenger
Meteor - What is the purpose of "ROOT_URL" and to what should it be defined?
Chat project - load balance with socket.io
Nginx - Allowing origin IP
nginx try_files, proxy_pass and upstream
Nginx Error 413
Send additional header to FastCGI backend with nginx
How nginx reload work ? why it is zero-downtime
What is the concurrency model in Openresty?
How to configure Nginx with React Router HistoryLocation?
Nginx proxy or rewrite depending on user agent
Heroku (Docker) PORT environment variable in nginx
nginx server_name inside stream block possible?
NGINX proxy_pass or proxy_redirect
uwsgi http is ambiguous
nginx proxy to comet

Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!