章老师你好:
有关web SSL测试中的问题向您请教。
我们测试中使用的是BRITESTREAM公司的BN1200 SSL硬件卸载卡。这块卡就是一块网卡,但是将ssl加解密全部完成,转交给系统的是明文。
nat模式下 DR使用一块SSL卸载卡(对用户),一块普通网卡(对real server),real server使用普通网 卡,测试ok。
What I haven't tested yet is failover between multiple load balancers.LVS contains a module that synchronizes TCP connection state information between the primary load balancer and a backup load balancer, so if the first one fails for any reason the second one will know most of the connection state. However, this is impossible to do with SSL because we cannot share the Secret connection information between chips. We will have to test and find out how thataffects the client-server connection state.