blob: 6a2c174ae93057aed056a6923fa5ace0aba7534f [file] [log] [blame]
Jamie Hannaford276a0322014-11-06 14:26:12 +01001/*
Jamie Hannaford249bb622014-11-07 12:11:26 +01002Package ssl provides information and interaction with the SSL Termination
Jamie Hannaford276a0322014-11-06 14:26:12 +01003feature of the Rackspace Cloud Load Balancer service.
4
5You may only enable and configure SSL termination on load balancers with
6non-secure protocols, such as HTTP, but not HTTPS.
7
8SSL-terminated load balancers decrypt the traffic at the traffic manager and
9pass unencrypted traffic to the back-end node. Because of this, the customer's
10back-end nodes don't know what protocol the client requested. For this reason,
11the X-Forwarded-Proto (XFP) header has been added for identifying the
12originating protocol of an HTTP request as "http" or "https" depending on what
13protocol the client requested.
14
15Not every service returns certificates in the proper order. Please verify that
16your chain of certificates matches that of walking up the chain from the domain
17to the CA root.
18
19If used for HTTP to HTTPS redirection, the LoadBalancer's securePort attribute
Jamie Hannaford227d9592014-11-13 10:32:07 +010020must be set to 443, and its secureTrafficOnly attribute must be true.
Jamie Hannaford276a0322014-11-06 14:26:12 +010021*/
Jamie Hannaford249bb622014-11-07 12:11:26 +010022package ssl