the solution was actually quite simple.
On the ZLB, add an additional ip number and create a TCP farm to your
backend server.
Make an A record it in the DNS for the hostname how you want to reach the
server.
create a certificate based on the hostname and configure apache so that he
makes use of the certificate
Thanks to everyone for helping me out
Regards, Arnoud
On Thu, Jun 14, 2012 at 1:22 PM, lownoise kol <[email protected]> wrote:
> no, unfortunately not
> The next step will be: add an extra IP address on the zlb, create a
> certificate based on the secondary ip adress and install the certificate on
> the backend https servers.
>
> to be continued!
>
> Regards, Arnoud
>
>
> On Thu, Jun 14, 2012 at 1:09 PM, Daniel Ribelin <
> [email protected]> wrote:
>
>> lownoise kol,
>>
>> Did you get this working?
>>
>> regards,
>>
>> Daniel.
>>
>>
>>
>> On 6/13/2012 4:18 PM, lownoise kol wrote:
>>
>> But are you doing https to your backend servers?
>> Without any certificates errors?
>>
>> Cheers
>>
>> On Wed, Jun 13, 2012 at 10:11 PM, Daniel Ribelin <
>> [email protected]> wrote:
>>
>>> In this situation you would want to set up a virtual interface with a
>>> unique ip address. Something like eth0:1 x.x.x.40 which would be a
>>> different ip address bambi interface for the zlb. That is how I currently
>>> have mine configured and it seems to work fine.
>>> --
>>> Sent from my Android phone with K-9 Mail. Please excuse my brevity.
>>>
>>> ------------------------------
>>> *From:* lownoise kol <[email protected]>
>>> *Sent:* Wed Jun 13 15:54:14 EDT 2012
>>> *To:* [email protected]
>>> *Subject:* Re: [Zenloadbalancer-support] Load Balancing https website
>>>
>>> Thanks but that is a https farm with ssl ofloading.
>>> What i try to reach is client---https --->Zlb---https--->webserver
>>>
>>> With a https farm you get: client---https --->Zlb---http--->webserver
>>> With a tcp farm you get the right one: client---https
>>> --->Zlb---https--->webserver
>>> however the pushed certificate is from the backend server witch is a
>>> different hostname than the zlb, which leads to the untrusted issuer
>>> warning
>>>
>>>
>>>
>>> On Wed, Jun 13, 2012 at 9:44 PM, Lou Feliz <[email protected]> wrote:
>>>
>>>> Hello,
>>>>
>>>> Link to article on ssl with zen LB
>>>>
>>>> http://mywordz.blogspot.com/2012/05/zen-load-balancer-ssl.html
>>>>
>>>>
>>>> Cheers!
>>>>
>>>> On Tue, Jun 12, 2012 at 4:48 AM, lownoise kol <[email protected]>wrote:
>>>>
>>>>> Hi,
>>>>>
>>>>> I'm just evaluating zen loadbalancer and i think it's a great
>>>>> product.
>>>>> I've just one question.
>>>>> I want to load balance 2 https websites, So i've created a farm with a
>>>>> tcp profile and with the 2 backend servers configured.
>>>>>
>>>>> Everything works as it should be however it will give you a
>>>>> certificate warning about untrusted issuer. That is because the
>>>>> certificates from the backend servers are used.
>>>>> So my question is: Is there a work around for this certificate error
>>>>> besides ssl offloading.
>>>>> I mean something about ssl bridging?
>>>>>
>>>>> Regards, Arnoud
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> Live Security Virtual Conference
>>>>> Exclusive live event will cover all the ways today's security and
>>>>> threat landscape has changed and how IT managers can respond.
>>>>> Discussions
>>>>> will include endpoint security, mobile security and the latest in
>>>>> malware
>>>>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>>>> _______________________________________________
>>>>> Zenloadbalancer-support mailing list
>>>>> [email protected]
>>>>> https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support
>>>>>
>>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Live Security Virtual Conference
>>>> Exclusive live event will cover all the ways today's security and
>>>> threat landscape has changed and how IT managers can respond.
>>>> Discussions
>>>> will include endpoint security, mobile security and the latest in
>>>> malware
>>>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>>> _______________________________________________
>>>> Zenloadbalancer-support mailing list
>>>> [email protected]
>>>> https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support
>>>>
>>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Live Security Virtual Conference
>>> Exclusive live event will cover all the ways today's security and
>>> threat landscape has changed and how IT managers can respond. Discussions
>>> will include endpoint security, mobile security and the latest in malware
>>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>> _______________________________________________
>>> Zenloadbalancer-support mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support
>>>
>>>
>>
>>
>> ------------------------------------------------------------------------------
>> Live Security Virtual Conference
>> Exclusive live event will cover all the ways today's security and
>> threat landscape has changed and how IT managers can respond. Discussions
>> will include endpoint security, mobile security and the latest in malware
>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>
>>
>>
>> _______________________________________________
>> Zenloadbalancer-support mailing
>> [email protected]https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Live Security Virtual Conference
>> Exclusive live event will cover all the ways today's security and
>> threat landscape has changed and how IT managers can respond. Discussions
>> will include endpoint security, mobile security and the latest in malware
>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>> _______________________________________________
>> Zenloadbalancer-support mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support
>>
>>
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Zenloadbalancer-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zenloadbalancer-support
