在同一域名上的多个服务器上扩展 Web 服务
我有一个提供小部件的网络服务。它托管在 server1.mydomain.com 下的服务器上。 (Linux、plesk、VPS)
我想要更多的物理服务器,可以通过 server2.mydomain.com 等访问。 请注意,它实际上是指向另一台物理服务器的相同域名。 此配置还必须支持 SSL。
我的问题是:
- 可以使用 DNS 配置来完成此操作吗?
- 要实现此目的,两台服务器的 DNS 设置是什么?
- 如上所述,SSL证书可以应用于相同域名的不同服务器吗?可以用多个子域SSL证书来完成吗?
谢谢!
I have a web service that serves widgets. It is hosted on a server under server1.mydomain.com. (Linux, plesk, VPS)
I would like to have more physical servers which will be accessed via server2.mydomain.com etc.
Note that its actually the same domain name pointing to another physical server.
This configuration also has to support SSL.
My questions are:
- Can this be done using DNS configuration?
- What are the DNS settings of both servers required to achieve this?
- Can SSL certificate be applied to different servers with same domain name as described above? Can it be done with multiple subdomains SSL certificate?
Thanks!
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
是的。您可以使用 dnsmadeeasy.com 等 DNS 提供商为每个服务器设置“A 记录”。每个 A 记录指定主机名(如 server2)和 IP 地址。
见上文。
是的。您需要购买通配符证书。 http://www.digicert.com 通配符证书价格合理。您可以使用您的域在任何服务器上安装证书。
Yes. You can use a DNS provider like dnsmadeeasy.com to set up "A records" for each server. Each A record specifies the hostname like server2 and the IP address.
See above.
Yes. You'll need to buy a wildcard certificate. http://www.digicert.com has reasonable prices on wildcard certificates. You can install the cert on any server using your domain.
这可以通过 循环 DNS 配置来完成,但这种技术有很大的缺点,我强烈建议您研究负载平衡的替代方案。
有许多可用的负载平衡解决方案、设备或软件、商业或开源的,其中大多数(如果不是全部)都将支持 SSL。尝试将其发布在服务器故障上,以获得更适合此类问题的社区。
This could be done with a round robin DNS configuration, but this technique offers significant drawbacks, and I strongly recommend you look into alternatives for load balancing.
There are a number of available load balancing solutions, appliance or software, commercial or open source, most if not all of which will support SSL. Try posting this on Server Fault to get a community better suited for this type of question.