SSL-Settings for Healthchecks (mod_proxy_balancer)

[Dominik Stillhard <Dominik.Stillhard@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

Hello all apache-users!

I’m trying to set up load-balancing to backends which use different SSL/TLS settings.

I’m using version 2.4.33 of apache.

According to documentation it should be possible to set SSLProxy* directives inside a <Proxy> section. I’m trying to do something like this :

 

<VHost>

  SSLProxyEngine on

  <Proxy balancer://mybalancer >
      SSLProxyProtocol TLSv1.2

      SSLProxyCipherSuite ….

      (other SSLProxy* directives like SSLProxyCAFile etc.)

      BalancerMember 1…..

      BalacnerMember 2…..

  </Proxy>

<VHost>

 

 

In the above example, the healthchecks use the standard SSL-settings defined in global scope, not the ones defined inside the Proxy section

The idea behind that is, that i want to set different TLS-settings (for healthchecks) on different LoadBalancers. When i move the directives up (on VHost level), the healthchecks take that into account, but like this, i cannot create more then one balancer inside a vhost…

 

If also asked this question on stackoverflow :

 

https://stackoverflow.com/questions/51261409/apache-loadbalancing-ssl-tls-settings-for-healthchecks

 

Any suggestions welcome.

Cheers

Dominik

 

 

Attachment: smime.p7s
Description: S/MIME cryptographic signature