We're doing Confluence clustering and we have an internal load balancer (LB) and I'm wondering what happens if I have an external load balancer. I'm more concern what information do I need to have on the ssl cert if we're doing end to end encryption.
1. Do I need to identify the LBs on the certificates or is this just processes throw the connection pool of the clustered nodes?
My question would rather be, what is the point of running 2 load balancers? If you need external access then you might as well just keep the external one and discard the internal one. As far as any configuration difference between ext/int goes, such as timeout thresholds or restricted paths or something, I'm reasonably certain it can be set up with one LB just fine.
As far as SSL goes, consider if you really need it, as it can affect performance
If users access your application over HTTPS and your application is on a secure network, we recommend that you terminate SSL (or TLS) at the load balancer (or the reverse proxy if you are using one). SSL decryption and encryption is a CPU intensive process, and offloading this function to the load balancer ensures that the application node has more resources to handle its regular operations.
- https://confluence.atlassian.com/enterprise/load-balancer-configuration-options-935383760.html
Either way though, there shouldn't be any use case behind multiple load balancers as far as I'm aware.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.