I handle ssl on the actual compile masters with SAN certs and it works just fine. Define "better"?
On Thu, Jun 23, 2016 at 12:20:44PM -0700, Braian Fabián Leiva wrote: > I'm trying to setup a Load Balancer in front of some Compile Masters and > the Puppet docs says that I can achieve that either with raw TCP proxying, > or acting as its own SSL endpoint[1]. If I configure the LB with SSL and > SNAT will that work? Is it better to use bridging instead? > [1] > [1]https://docs.puppet.com/guides/scaling_multiple_masters.html#option-3-use-a-load-balancer > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [2]puppet-users+unsubscr...@googlegroups.com. > To view this discussion on the web visit > > [3]https://groups.google.com/d/msgid/puppet-users/5ddb5120-4f41-4404-9f91-c177f7651757%40googlegroups.com. > For more options, visit [4]https://groups.google.com/d/optout. > > References > > Visible links > 1. > https://docs.puppet.com/guides/scaling_multiple_masters.html#option-3-use-a-load-balancer > 2. mailto:puppet-users+unsubscr...@googlegroups.com > 3. > https://groups.google.com/d/msgid/puppet-users/5ddb5120-4f41-4404-9f91-c177f7651757%40googlegroups.com?utm_medium=email&utm_source=footer > 4. https://groups.google.com/d/optout -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/20160624122657.GA17616%40iniquitous.heresiarch.ca. For more options, visit https://groups.google.com/d/optout.
