Welcome! Log In Create A New Profile

Advanced

Re: Load Balance - Docker

Shaun Glass
November 16, 2016 08:26AM
Ok ... after some more work I have it as follow and working. I created the
certificates mentioned below as well :

upstream ucp_cluster {
server 10.12.64.218:444;
server 10.12.64.219:444;
server 10.12.64.222:444;
}

server {
listen 444 ssl;
server_name docker-poc.domain.com;

ssl on;
ssl_certificate /etc/nginx/ssl/docker-poc.domain.com.crt;
ssl_certificate_key /etc/nginx/ssl/docker-poc.domain.com.key;

ssl_session_timeout 5m;

ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;

ssl_ciphers
"ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256";
ssl_prefer_server_ciphers on;

location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;

proxy_pass https://dtr_cluster/;
proxy_redirect off;
}
}

On Tue, Nov 15, 2016 at 4:43 PM, Yuriy Medvedev <medvedev.yp@gmail.com>
wrote:

> Use listen 443 ssl;
>
> 2016-11-15 17:34 GMT+03:00 Shaun Glass <shaunglass@gmail.com>:
>
>> Mmmm ... I gather that would be at the Docker Nodes. Just want nginx that
>> when receiving a connection just connects to either of the 3.
>>
>> On Tue, Nov 15, 2016 at 4:16 PM, Yuriy Medvedev <medvedev.yp@gmail.com>
>> wrote:
>>
>>>
>>> 2016-11-15 17:11 GMT+03:00 Shaun Glass <shaunglass@gmail.com>:
>>>
>>>> proxy_redirect
>>>
>>>
>>> Where you terminate ssl?
>>>
>>> _______________________________________________
>>> nginx mailing list
>>> nginx@nginx.org
>>> http://mailman.nginx.org/mailman/listinfo/nginx
>>>
>>
>>
>> _______________________________________________
>> nginx mailing list
>> nginx@nginx.org
>> http://mailman.nginx.org/mailman/listinfo/nginx
>>
>
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Load Balance - Docker

Shaun Glass November 15, 2016 09:12AM

Re: Load Balance - Docker

Yuriy Medvedev November 15, 2016 09:18AM

Re: Load Balance - Docker

Shaun Glass November 15, 2016 09:36AM

Re: Load Balance - Docker

Yuriy Medvedev November 15, 2016 09:44AM

Re: Load Balance - Docker

Shaun Glass November 16, 2016 08:26AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 93
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready