I use SSL hardware acceleration cards and they work like a champ. I think
Rainbow builds these for a reasonable price ( ours came with the F5
hardware ).
Before that we just ran a 'Lite' Stronghold on the front end and proxy'd
back all connections to our dynamic ocntent servers. It held up really
well and was a really easy config to manage and setup.
However, now the F5 handles all SSL traffic and balances back to a server
farm. Each box has two instances of apache running, one mod perl and one
light ( on diff ports ). The load balancer checks the URI content and
switches between the ports as needed.
Careful with Keepalives, they'll kill you if your using some load
balancing solutions. In the F5 world KeepAlives destroy rules based load
balancing, it gets ugly. Your Mileage May Vary.
John-
On Tue, 8 Aug 2000, Matt Sergeant wrote:
> On Tue, 8 Aug 2000, Nigel Hamilton wrote:
>
> > Hi,
> > Also, does anyone know a way to speed up SSL somehow?
>
> Keep-alives. To be able to do that you need to store your output and make
> sure that your solution sends the appropriate headers that don't kill
> keep-alive. These include Content-Length (which is why you need to store
> your output before sending it) and some others which I forget, anyone?
>
> --
> <Matt/>
>
> Fastnet Software Ltd. High Performance Web Specialists
> Providing mod_perl, XML, Sybase and Oracle solutions
> Email for training and consultancy availability.
> http://sergeant.org | AxKit: http://axkit.org
>
>
