如何实现SSL负载均衡？
我必须将 ASP.NET 应用程序部署到两个独立的 IIS 服务器中。 我的应用程序通过 HTTPS/TLS 运行。 我的 ASP 代码必须处理客户端 SSL 证书，这意味着我无法使用简单的转发负载均衡器，因为我永远不会从 nginx 或 Apache 负载均衡器获得此类证书。
据我了解，Microsoft 世界中没有通用的（开源或免费）负载平衡解决方案，尤其是 SSL。
我听说过简单的 DNS 平衡，我的域名将绑定到多个 ISS 服务器，每个新客户端（会话）将获得一台服务器的 IP，这样我就可以获得简单的平衡和 SSL 支持。
现在，我刚刚开始部署，了解您对这种平衡的看法真的很有趣，或者可能会得到一些建议。
谢谢！
对于我来说，除了 DNS 平衡之外，我找不到其他 HTTPS 解决方案。 我只是别无选择。
???
I have to deploy my ASP.NET application into two seperated IIS servers. My application works over HTTPS/TLS. My ASP code has to handle client SSL certificate and it means I can't use simple forward load balancers, because I will never get such certificate from nginx or Apache Load Balancer.
As I understand there is no common (open-source or free) solution for load balancing in Microsoft world and especially for SSL.
I heard about simple DNS balancing, where my domain name would be bound to several ISS servers, and every new client (session) would get IP of one server,and such way I would get simple balancing and SSL support.
Now, I am just at the begging of deployment and it is really interesting to know your opinion of such balancing, or may be to get some recommendations.
Thanks!
As for me, I can't find another solutions for HTTPS beside DNS balancing. I just have no choice.
???
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（6）
Windows NLB 绝对是您的解决方案 - 它位于每个 IIS 服务器上的网络堆栈中，并在成员服务器之间分发 TCP 请求。 NLB 使用 SSL 流量，因为它通过 TCP 端口而不是流量的内容进行分发。
您需要在每台服务器上安装相同的 SSL 证书，但除此之外，配置很简单。
Windows NLB is definitely your solution - it sits in the network stack on each of your IIS servers and distributes TCP requests among the member servers. NLB works with SSL traffic, since it distributes via TCP Ports, not the contents of the traffic.
You will need to install the same SSL certs on each server, but other then that, the configuration is trivial.
我已经在 Linux 上成功使用 keepalived 。 这是一个简单的工具，可以以故障转移的方式管理 http://linuxvirtualserver.org 负载均衡器负载平衡机和多台服务器。
I've successfully been using keepalived on Linux. It's a simple tool that administers http://linuxvirtualserver.org load balancer in a way that you could have fail over load balancing machines and multiple servers.
我们使用思科本地控制器，他们似乎处理得很好。
我还没有使用过用于负载平衡的纯软件解决方案，但是 balance 可能工作得很好。 我仅将其用于纯粹的 1:1 端口转发。
与 DNS 平衡相比，使用平衡/LD 方法的优点是您可以轻松地使用它将服务器从池中取出（用于升级、部署、调试等）。
We use Cisco Local Directors, and they seem to handle it fine.
I haven't played with pure software solutions for load balancing, but balance might work fine. I've only used it for purely 1:1 port forwarding.
The advantage of using a balance/LD approach over DNS balancing is that you can easily then use it to take servers out of the pool (for upgrades, deployments, debugging, etc).
Zen Load Balance 是一个免费且非常简单的解决方案。 http://sourceforge.net/projects/zenloadbalancer/
Zen Load Balance is a free, very simple solution. http://sourceforge.net/projects/zenloadbalancer/
基于 DNS 的负载平衡应该会带您走很长的路。 点击此处查看有关该主题的文章。 有关 IIS/ASP 世界中负载平衡的概述，去这里。
Windows 网络负载平衡可能是适合您的解决方案，在这里您会找到有关它的大量信息。
DNS based load balancing should take you a long way. Click here for an article on the subject. For an overview of load balancing in the IIS/ASP world, go here.
Windows Network Load balancing may be a solution for you, here you'll find lots of information about it.
根据您的预算有多少，有很多解决方案。
您可以在 Windows Server 上使用 Windows 网络负载平衡，无需额外费用。 它的设置相当简单，并且不会妨碍客户端证书。
Depending on how much money is in your budget there are plenty of solutions out there.
You can use Windows Network Load Balancing on Windows Server for no extra cost. It is reasonably simple to setup and won't get in the way of the client certificate.