Transparent SSL termination on Amazon's Elastic Load Balancer with mod_rpaf
Earlier today, a tiny pull request we made for mod_rpaf was finally merged.
With these changes, all you need to put into your apache.conf
is
This will give you transparent SSL termination for Apache VirtualHosts located behind an Amazon EC2 Elastic Load Balancer.
In this setup, clients connect to the ELB via SSL and the ELB forwards the connection as plain HTTP to your virtual host. Yet, inside your virtual host (and for example, in PHP scripts), everything will look and feel like a direct SSL connection made by the client. Especially the REMOTE_ADDR
, HTTPS
, SCRIPT_URI
and HTTP_PORT
server variables will be what you would expect for a direct connection.