Hi Guys .. I'm hoping you can point me in the right direction:
I have a single server running Apache 2.0, Mongrel 1.0, Pound 2.3.2, Curl
7.16.4, Ruby 1.8.6, Rails 1.2.3 and openssl 0.9.8e ..
The site is a small e-commerce site to sell tickets to an event. People can
pay by check or credit card. The credit card is giving me fits because I am
having trouble SSL securing one leg of a 2 leg round trip. This is the basis
of my question.
I have Pound setup to listen on port 443. The host should only be accessible
via an SSL / HTTPS connection. However, I have 3 mongrel tasks running on
port 3000, 3001, 3002. My goal is to have Pound send requests for static pages
and SWF files to Apache on port 81 and to load balance against Mongrel on ports
3000-3002.
However, despite following the pound.cfg instructions I have found for people
running similar configurations, I don’t seem to be able to get to the mongrel
servers via https. I want my web client to connect to pound via port 443 and
pound to redirect to one of the available mongrel servers load balancing as it
goes. This should work right?
Here is my pound.cfg ... HELP what am I doing wrong here.
User "flexanalytics"
Group "vuser"
Loglevel 2
Alive 30
ListenHTTPS
Address 208.131.147.194
Port 443
cert "/etc/httpd/conf/ssl.pem/flexanalytics.com.pem"
#pass along https
AddHeader "X-Forwarded-Proto: https"
HeadRemove "X-Forwarded-Proto"
Service
#apache
BackEnd
Address 0.0.0.0
Port 444
End
#mongrel
BackEnd
Address 127.0.0.1
Port 3000
End
BackEnd
Address 127.0.0.1
Port 3001
End
BackEnd
Address 127.0.0.1
Port 3002
End
End
End
Greg Pepus
Consulting Partner
(301) 787-2989
-----Original Message-----
From: pound(at)apsis.ch [mailto:pound(at)apsis.ch]
Sent: Thursday, August 09, 2007 5:12 PM
To: Greg Pepus
Subject: subscribe [8cf4dce1]
Hello "Greg Pepus" <gpepus(at)flexanalytics.com>,
We have received a subscription request for your email address to the
Pound Mailing List mailing list. To confirm the request,
simply reply to this message, leaving the subject line unchanged.
If you do not wish to subscribe to this list, please disregard this
message. Send questions to roseg(at)apsis.ch.
Yours, roseg(at)apsis.ch
|