haproxy or nginx ssl offload condig

[alwayshusslin]

Hi All,

Is anyone able to share a LB config with working ssl offload config for console proxy?

Ive taken a look at a previous discussion but its unclear it seems its being done a few different ways

management ui is no issue bur ideally we are looking to terminate ssl on the load balancer so we can consolidate

[mahdiadnan]

Hi,

A simple FE/BE in HTTP mode would be enough to terminate the SSL at the proxy for the console proxy page, but for the WSS, you should have something like this in order to work:

frontend cloudstack_wss_tcp_fe
   mode tcp
bind BINDIP:8443 ssl crt /path/to/cert
default_backend cloudstack_wss_be_tcp

backend cloudstack_wss_be_tcp
option tcp-check
server console-wss-srv1 BEIP:8443 ssl verify none sni ssl_fc_sni alpn http/1.1 check

[daviftorres]

@alwayshusslin , I think this discussion contains the answers you are looking for.
#11562

[abdessalllam]

Full guide on NGINX with CloudStack/SSL/Cloudflare for MGMT Server and SystemVMs: https://abdessal.am/cloudstack-part-4-first-vm-walkthrough-uefi-setup-domain-setup-w-sslcloudflare/