[lvs-users] Another question while I'm at it about SSL termination on the director.

[prockter at lse.ac.uk]

lists wrote:
> At the moment I can do SSL termination with pound, then hand off localy 
> to HaProxy for cookie insertion and load balancing:
> Pound -> HaProxy -> Real Servers
> x.x.x.10:443 -> x.x.x.10:80 -> Real Servers
> 
> But I'd like to do :
> Pound -> LVS -> Real Servers
> x.x.x.10:443 -> x.x.x.10:80 -> Real Servers
I'm curious, why not just go

Pound -> Real Servers ?

What benefit is HAProxy/LVS giving you?  Pound will do most of the 
things I can imagine one would want as long as a single server can 
handle the amount of SSL offload you require.

Using Pound means you loose the client IP from the TCP/IP request (it 
goes into the HTTP headers) which to me is the major benefit of LVS 
based setups rather than HAProxy anyway.

Neil

Please access the attached hyperlink for an important electronic communications disclaimer: http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm