用于动态 IP Intranet Web 服务器的 https(在两个 IP 之间交换以实现故障转移)

发布于 2024-09-17 08:03:21 字数 592 浏览 5 评论 0原文

我们有一个 Asp.Net / IIS6 Web 应用程序,它位于 Intranet 上不同数据中心的两台服务器上,采用主动-被动故障转移配置。我们将这些服务器称为 MyAppSpringfield 和 MyAppShelbyville。

现在我们已经设置了一个名为“MyApp”的 DNS 名称,以便用户可以通过 http://myapp,并且他们不需要知道他们实际使用的是哪个服务器。

每个月,我们都会通过更改 DNS 条目来交换主动和被动节点,以便在主动节点因某种原因死亡的那一天到来时保持良好的实践。

现在我们需要设置 SSL 来访问应用程序,但我听说 HTTPS 证书链接到某个 IP 地址或某个应用程序通用名称,所以我担心这是不可能的,因为 IP “MyApp”指向的地址每月都会发生变化。

谁能告诉我是否可以在这些服务器上设置 SSL,这样任一 IP 都可以使用证书,并且用户可以简单地通过 https://myapp

多谢

We've got an Asp.Net / IIS6 web application which sits on two servers in separate data centers on our intranet in an active-passive failover configuration. Lets call these servers MyAppSpringfield and MyAppShelbyville.

Now we've got a DNS name set up called 'MyApp', so that the users can simply access the application through http://myapp, and they don't need to know which server they're actually using.

Each month we swap the active and passive nodes around by changing the DNS entry, to keep in good practice for when the day comes that the active node dies for some reason.

Now we need to set up SSL for access to the application, but i've heard that HTTPS certificates are linked to a certain IP address or a certain application common name, so i'm worried this won't be possible, since the IP address that 'MyApp' points to will change every month.

Can anyone tell me if this is possible to set up SSL on those servers, in such a way that either IP will be fine with the cert and the users can simply access it via https://myapp ?

Thanks a lot

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

时光倒影 2024-09-24 08:03:28

我不认为你有问题。我不是 SSL 专家,但我相信它与域名相关,而不是 IP。我最近在几个站点上切换了 IP 和数据中心,就 SSL 证书而言没有任何问题。证书颁发时不知道 IP 地址,只知道域名。

I don't think you have a problem. I'm no SSL expert, but I believe it is tied to the domain name, rather than the IP. I've switched IPs and data centers on several sites recently with no problem as far as SSL Certs are concerned. The Cert isn't aware of the IP address when it is issued, only the domain name.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文