JIRA Load Balancing for Data Center

We are moving to Data Center and have it setup with the two nodes using shared home and can connect to each separate.  We now have been getting our network guys to configure our VIPs, DNS and F5 for these servers, however our F5 setup generally requires health-check files installed into a virtual directory for the application for the F5 to function which we do not have...  Although I have asked them to try to use the /status/ JIRA healthcheck test which I hope solves this problem.  However, I see docs on integrating JIRA with IIS - when does this need to happen - for SSL?  Once we get our loadbalancer up and running we want to look at using SSL in JIRA. We just have the standard install of JIRA/tomcat...

1 answer

1 accepted

0 votes
Accepted answer

If you have an f5 BIG-IP load balancer then it supports many types of health monitors - http is just one option, TCP is another. HTTP health monitor configuration is pretty extensive, so it should be possible to use the /status resource without much hassle.

I don't see why you would need to use IIS if you own an F5 load balancer. Regarding SSL - if you have the proper firewall setup, you should use the F5 load balancer to do SSL offloading. SSL will only be used when connecting to the load balancer, while connections from load balancer to the JIRA instances will not be encrypted - this will offload the SSL servers from doing the encryption.

Thanks Petar, yes - that is how we have set it up and we have now been able to setup the healthcheck through tomcat and have it working (it was more an issue with communication with our network guys that we were using tomcat).  So now we are looking at SSL and yes we are doing it as you described and I have been trying to change the server.xml with below and changing the URL of the app to be https:\\xxxxx.xxxx.com but can't get JIRA to bring up the page just normal problem loading page errors...

secure="true" scheme="https" proxyPort="8443" proxyName="xxxx.xxxx.com"


SSL is setup with wildcard on server but do I still need to add something to keystore?

So we now have it working with bringing up the https:\\FQDN which is great and we can log in but then it starts serving up http pages and pages don't display so we need JIRA to send a HTTPS url, but accept HTTP connection..

We just needed to use a stream profile to send http -> https and that fixed it

@Joanne could you share a KB if you have any that we can refer to setup Data center with LB in front and SSL on servers. We are currently in process of setting up data center with A10 hardware load balancer and trying to have https all the way from client to server. Was there anything in specific that we need to do to make sure application is listening on https from LB

Suggest an answer

Log in or Sign up to answer
Community showcase
Published Jan 08, 2019 in Jira

How to Jira for designers

I’m a designer on the Jira team. For a long time, I’ve fielded questions from other designers about how they should be using Jira Software with their design team. I’ve also heard feedback from other ...

1,123 views 4 9
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you