JIRA Load Balancing for Data Center

We are moving to Data Center and have it setup with the two nodes using shared home and can connect to each separate.  We now have been getting our network guys to configure our VIPs, DNS and F5 for these servers, however our F5 setup generally requires health-check files installed into a virtual directory for the application for the F5 to function which we do not have...  Although I have asked them to try to use the /status/ JIRA healthcheck test which I hope solves this problem.  However, I see docs on integrating JIRA with IIS - when does this need to happen - for SSL?  Once we get our loadbalancer up and running we want to look at using SSL in JIRA. We just have the standard install of JIRA/tomcat...

1 answer

1 accepted

Accepted Answer
0 votes

If you have an f5 BIG-IP load balancer then it supports many types of health monitors - http is just one option, TCP is another. HTTP health monitor configuration is pretty extensive, so it should be possible to use the /status resource without much hassle.

I don't see why you would need to use IIS if you own an F5 load balancer. Regarding SSL - if you have the proper firewall setup, you should use the F5 load balancer to do SSL offloading. SSL will only be used when connecting to the load balancer, while connections from load balancer to the JIRA instances will not be encrypted - this will offload the SSL servers from doing the encryption.

Thanks Petar, yes - that is how we have set it up and we have now been able to setup the healthcheck through tomcat and have it working (it was more an issue with communication with our network guys that we were using tomcat).  So now we are looking at SSL and yes we are doing it as you described and I have been trying to change the server.xml with below and changing the URL of the app to be https:\\xxxxx.xxxx.com but can't get JIRA to bring up the page just normal problem loading page errors...

secure="true" scheme="https" proxyPort="8443" proxyName="xxxx.xxxx.com"


SSL is setup with wildcard on server but do I still need to add something to keystore?

So we now have it working with bringing up the https:\\FQDN which is great and we can log in but then it starts serving up http pages and pages don't display so we need JIRA to send a HTTPS url, but accept HTTP connection..

We just needed to use a stream profile to send http -> https and that fixed it

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted Sep 18, 2018 in Jira

What modern development practices are at the heart of how your team delivers software?

Hey Community mates! Claire here from the Software Product Marketing team. We all know software development changes rapidly, and it's often tough to keep up. But from our research, we've found the h...

20,894 views 2 7
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you