4 ms·
HTTP-01 verification works quite well behind load balancers - it's a simple GET request to a specific URL. You're probably thinking of TLS-SNI-01, which requir
by pfg 10y ago
HTTP-01 verification works quite well behind load balancers - it's a simple GET request to a specific URL.
You're probably thinking of TLS-SNI-01, which requires changes on the host that's terminating TLS (which isn't possible on a load balancer unless it has dedicated support for ACME).
- ceejayoz 10y ago> HTTP-01 verification works quite well behind load balancers - it's a simple GET request to a specific URL. Running the client on one of the servers frequently results in it hitting one of the other servers in the cluster. It's a pain in the ass - you either rely on luck and retry a number of times until it hits the right server, or you have to go the more manual route and deploy the challenge directory to all of the servers. DNS doesn't care how many servers there are, as long as there's the right record in place.