Hey Gaj,
We have several Data Center customers doing this where they need end-to-end encryption for compliance reasons.
However, my personal recommendation is to use a local reverse proxy on each node if you can manage HTTP between your reverse proxy and Tomcat on the local node. nginx does a better job at terminating SSL than Tomcat, and the setup is a little more flexible than purely Tomcat only. For example, if you're using nginx Plus as your load balancer, nginx on each node would provide additional reporting and metrics to the load balancer about each node's health.
The tricky bit with doing it in Tomcat is that you'll need to ensure each node correctly imports the certificates you're using (and you'll need to do this each time you scale out to a new node). The Java keytool can be a bit fiddly to work with.
Cheers,
Daniel
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.