JBoss EAP6 High Availability

Enabling SSL in the proxy channel

In this section, we'll configure mod_cluster to use HTTPS instead of AJP13 for the proxy channel.

Since we have prepared the necessary certificates in the previous sections, enabling HTTPS for the proxy channel won't be a difficult task. First, let's check the configuration in the httpd server. We need to add an SSLProxyEngine On configuration to the virtual host to enable public access:

<VirtualHost 172.16.123.1:443>
  ...
SSLProxyEngine On
  ...
</VirtualHost>

As we can see from the preceding configuration, it tells httpd that we need to use an SSL connection for the proxy channel, and that's all that we need to configure httpd.

Note

The sample configuration file is mod-cluster-ssl-full.conf.

Now we need to configure ...