Re: Load balancing SSL sessions

[Kelly Vista]

I believe there is an issue with failover, however, with this route (thus, 
the second use case for load balancers - failover).  If an IP address in the 
DNS list goes down, it can take up to 48 hours before the DNS maps are 
updated to reflect the loss of one of the IPs.  In the meantime, clients may 
be getting directed to a server that is not available.

Someone pls correct me if I'm wrong about that.
From: Filip Hanik - Dev Lists <[EMAIL PROTECTED]>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
To: Tomcat Users List <tomcat-user@jakarta.apache.org>
Subject: Re: Load balancing SSL sessions
Date: Tue, 22 Feb 2005 16:01:10 -0600
you can also use DNS round robin,
www.mysite.com resolves to two or more IP addresses.
Filip
Andrew Miehs wrote:
We use F5 BigIPs, but they are probably overkill for your application - 
The cisco probably will be as well.

A 'Cheap' software solution might be to work with redirects, and 2 
separate IP addresses.
ie: ssl1.mysite.com and ssl2.mysite.com - You will need 2 ssl keys though 
for this to work.

Does all of your app require ssl? or just a certain part, ie: payment. Do 
you need the stickiness
for the whole app? or just for the ssl (seeing you are using tomcat, you 
will probably need it for the whole app)...

Andrew
On Feb 22, 2005, at 10:24 PM, Kelly Vista wrote:
Hi -
We are looking to deploy our app, running on Tomcat 5, soon and are 
exploring load balancing options.  We are looking at H/W and S/W 
solutions, and I was wondering if anyone had any past experience/advice 
they would like to share.

Our deployment is as pretty run-of-the-mill as it gets: 2 machines, each 
running Tomcat.  We would like to avoid replicating state (since we have 
a lot of state in these apps, for reasons beyond  our current control).  
Even in-memory session replication would not be option here, so we're 
punting on the Tomcat cluster solution.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]