News for hackers. Stuff that matters.

A comment on SSL session caching in nginx. Parent comment

Re:SSL session caching in nginx by X-Istence on Monday June 27, 2011 @08:29PM (#2703533)
Transparent load balancers exist and don't have the issues you are talking about.
[ Parent | on HN ]
Re:SSL session caching in nginx by sugarcode on Monday June 27, 2011 @08:57PM (#2703590)
Hardware or software? There's some hacks with TPROXY/HAproxy I've seen that would do the transparent proxy but the setup seems like more trouble than it's worth.
[ Parent | on HN ]
Re:SSL session caching in nginx by ominous_prime on Monday June 27, 2011 @09:41PM (#2703690)
IPVS is built-in to the Linux kernel, and HA projects like keepalived have ipvsadm integration. Tproxy works fine, and has been in the kernel since 2.6.30. In most load-balancing cases, losing the remote IP address isn't that big a deal (you have to deal with NAT too), and a full proxy like haproxy has it's benefits.
[ Parent | on HN ]
Re:SSL session caching in nginx by X-Istence on Tuesday June 28, 2011 @12:39AM (#2704106)
OpenBSD PF for example can do round-robin load balancing.
[ Parent | on HN ]