JIRA Load Balancing for Data Center

We are moving to Data Center and have it setup with the two nodes using shared home and can connect to each separate.  We now have been getting our network guys to configure our VIPs, DNS and F5 for these servers, however our F5 setup generally requires health-check files installed into a virtual directory for the application for the F5 to function which we do not have...  Although I have asked them to try to use the /status/ JIRA healthcheck test which I hope solves this problem.  However, I see docs on integrating JIRA with IIS - when does this need to happen - for SSL?  Once we get our loadbalancer up and running we want to look at using SSL in JIRA. We just have the standard install of JIRA/tomcat...

1 answer

1 accepted

If you have an f5 BIG-IP load balancer then it supports many types of health monitors - http is just one option, TCP is another. HTTP health monitor configuration is pretty extensive, so it should be possible to use the /status resource without much hassle.

I don't see why you would need to use IIS if you own an F5 load balancer. Regarding SSL - if you have the proper firewall setup, you should use the F5 load balancer to do SSL offloading. SSL will only be used when connecting to the load balancer, while connections from load balancer to the JIRA instances will not be encrypted - this will offload the SSL servers from doing the encryption.

Thanks Petar, yes - that is how we have set it up and we have now been able to setup the healthcheck through tomcat and have it working (it was more an issue with communication with our network guys that we were using tomcat).  So now we are looking at SSL and yes we are doing it as you described and I have been trying to change the server.xml with below and changing the URL of the app to be https:\\xxxxx.xxxx.com but can't get JIRA to bring up the page just normal problem loading page errors...

secure="true" scheme="https" proxyPort="8443" proxyName="xxxx.xxxx.com"

 

SSL is setup with wildcard on server but do I still need to add something to keystore?

So we now have it working with bringing up the https:\\FQDN which is great and we can log in but then it starts serving up http pages and pages don't display so we need JIRA to send a HTTPS url, but accept HTTP connection..

We just needed to use a stream profile to send http -> https and that fixed it

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published Thursday in Jira

5 ways you can make the most of Jira Software and Bitbucket Cloud

As part of the Bitbucket product team I'm always interested in better understanding what kind of impact the use of our tools have on the way you work. In a recent study we conducted of software devel...

119 views 0 5
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you