Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Niche feature configuration is always prominent in UI (SSL Offload) #3056

Closed
PaulAngus opened this issue Nov 26, 2018 · 8 comments
Closed

Niche feature configuration is always prominent in UI (SSL Offload) #3056

PaulAngus opened this issue Nov 26, 2018 · 8 comments

Comments

@PaulAngus
Copy link
Member

ISSUE TYPE
  • Bug Report
COMPONENT NAME
UI
CLOUDSTACK VERSION
4.11.2.0
CONFIGURATION
OS / ENVIRONMENT
SUMMARY

When adding a load balancing rule a SSL Certificate column is presented to the user, regardless of whether the network offering supports SSL offload,
This feature is only available when using a NetScaler.

image

STEPS TO REPRODUCE
Navigate to the load balancing tab in the UI when the environment does not have the NetScaler load-balancing feature enabled
EXPECTED RESULTS
Should not see option to upload an SSL certificate
ACTUAL RESULTS
see option to upload an SSL certificate
@onitake
Copy link
Contributor

onitake commented Apr 29, 2019

Wouldn't it be better to support SSL offloading for the built-in load balancer instead?
HAProxy can do SSL termination, though some work to prepare the configuration and combine certificate and key into one blob may be needed.

@PaulAngus
Copy link
Member Author

It would certainly be nice. I'm sure that the community would very much welcome the feature. But for now the UI promises something that can't be provided most of the time. And that's not ok...

@rohityadavcloud
Copy link
Member

Instead of removing the feature - we could allow admins/users to setup SSL termination via HAProxy that makes this an enhancement.

@rohityadavcloud rohityadavcloud modified the milestones: 4.13.0.0, 4.14.0.0 Jun 28, 2019
@andrijapanicsb andrijapanicsb modified the milestones: 4.14.0.0, 4.15.0.0 Jan 3, 2020
@rohityadavcloud
Copy link
Member

cc @weizhouapache do you have plans (or maybe via #4141 ) to support SSL offloading via nginx/haproxy?

@weizhouapache
Copy link
Member

cc @weizhouapache do you have plans (or maybe via #4141 ) to support SSL offloading via nginx/haproxy?

@rhtyd SSL offloading is supported in PR #4141

@rohityadavcloud rohityadavcloud modified the milestones: 4.15.0.0, 4.16.0.0 Nov 18, 2020
@nvazquez
Copy link
Contributor

@PaulAngus @weizhouapache is this issue still valid in the new UI?

@weizhouapache
Copy link
Member

@PaulAngus @weizhouapache is this issue still valid in the new UI?

@nvazquez seems not.

image

@nvazquez
Copy link
Contributor

Thanks @weizhouapache, closing it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants