Here is our current infrastructure:
- 2 web servers behind a shared load balancer
- dns is pointing to the load balancer
- web app is done in asp.net, with wcf services
My question is how to set up the SSL certificate to support https connection.
Here are 2 ideas that I have:
- SSL certificate terminates at the load balancer. secure/unsecure communication behind the load balancer will be forwarded to 2 different ports.
pro: only need 1 certificate as I scale horizontally
cons: I have to check secure or not secure by checking which port the request is coming from. doesn't quite feel right to me
WCF by design will not work when IIS is binded 2 different ports
(according to this) - SSL certificate terminates on each of the server?
cons: need to add more certificates to scale horizontally
thanks