[Cialug] Web caches and SSL
David Michael
1.david.michael at gmail.com
Tue Aug 25 10:07:56 CDT 2015
Varnish cache plus (varnish's paid option) supports SSL.
https://www.varnish-software.com/blog/flying-pigs-and-ssl-varnish-cache-plus
Otherwise you could terminate SSL in front of varnish with a web server.
Or it looks like HAproxy now supports SSL termination as well. So you could
sit HAproxy in front of varnish.
https://www.digitalocean.com/community/tutorials/how-to-implement-ssl-termination-with-haproxy-on-ubuntu-14-04
On Tue, Aug 25, 2015 at 9:54 AM, Matthew Nuzum <newz at bearfruit.org> wrote:
> I saw this in RH's OpenSource.com newsletter today: Why every website
> should switch to HTTPS
>
> http://opensource.com/business/15/8/interview-daniel-roesler-utilityapi?sc_cid=70160000000x3vkAAA
>
> Last year I started switching all my sites over to SSL. A few of my sites
> were using a Varnish web cache to speed them up. Since Varnish doesn't
> terminal SSL I have been taking it out of the stack.
>
> I miss it, though. It helped a lot, even if it did make some things more
> complicated. Are the days of using a web cache in this way gone?
>
> I know I could use a web server to terminate SSL, then proxy to Varnish
> which would then proxy to the backend web server. This seems like a lot of
> proxying, which is why I'm not doing it. Is there an easier/better way that
> I should consider?
>
> --
> Matthew Nuzum
> newz2000 on freenode, skype, linkedin and twitter
>
> ♫ You're never fully dressed without a smile! ♫
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
>
--
David Michael
More information about the Cialug
mailing list