aT,

Every SSL server needs a pubic IP address (in theory you can use 
wildcards but I haven't seen them working.)
In pound you just setup up a different cert for each virtual server.




aT wrote:[...]

Hi,
    
       I have solved the problem of no route to host errors. I believe
it was related to pf. I disabled the state tracking on the inside
interface and also increased the open file descriptors for user pound
which I run pound as to 1024 because I was hitting the soft limit.
Everything looks fine except for one thing. I run on the backends
caucho resin and do load balancind to 2 backend. It seems that at about
12 hours time interval one of the backends freezes. If I telnet on port
80 I get a response but when I try to do a GET nothing happens and it
just hangs. Restarting resin fixes the problem. What is curios is that
we have been running same services for couple of weeks with only one
server and forwarding through pf and did not get any errors so one
server handled the load pretty well. I am not sure if this is a resin
issue or a pound issue or maybe something like a pound and resin
compatibility issue. 
       Does anyone use resin + pound and have some ideas?

Thank you.









 
Adrian Bucur 
Senior System
Administrator
NOBEL Ltd.
 [...]

On Thu, 2007-10-11 at 18:39 +0200, Pierre-Alain RIVIERE wrote:[...]

See the RewriteLocation directive in the manual. You may also want to
look at your trac application to see if you could force it to redirect
to a HTTPS address.[...]