Apache + Tomcat + SSL 负载均衡及数据加密

Apache + Tomcat + SSL 负载均衡及数据加密

 

要想同时实现负载均衡及加密，需要对两个文件进行配置，一个是Apache的/conf/httpd.conf文件，还有一个是SSL的/conf.d/ssl.conf文件。

 

1.配置：ssl.conf

 

<VirtualHost *:443>

 

    SSLEngine on

    SSLProxyEngine on

 

    SSLProtocol all -SSLv2 -SSLv3

    SSLHonorCipherOrder on

    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM

    SSLCertificateFile /etc/httpd/conf/server.crt

    SSLCertificateKeyFile /etc/httpd/conf/server.key

    SSLCertificateChainFile /etc/httpd/conf/ca.crt

 

    ProxyPreserveHost On

    ProxyPass / balancer://cluster/ stickysession=jsessionid nofailover=On

    ProxyPassReverse  / balancer://cluster/

    ServerAdmin [e-mail]

    ServerName IP(域名)

    ServerAlias IP（域名）

    ErrorLog "logs/lbtest-error.log"

    CustomLog "logs/lbtest-access.log" common

 

</VirtualHost>

 

2.配置：httpd.conf

 

在httpd.conf末尾加上以下代码

 

ProxyRequests Off

Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; path=/" env=BALANCER_ROUTE_CHANGED

<proxy balancer://cluster>

    BalancerMember https://IP1（域名） loadfactor=1 route=jvm1

    BalancerMember https://IP2（域名） loadfactor=1 route=jvm2

    ProxySet stickysession=ROUTEID

</proxy>

 

注意：文中红色部分根据个人情况自定义名称