How to terminate SSL at a Load Balancer in front of the vFunction Docker Server
Overview of the Issue
An organization wants to use SSL for secure traffic from external traffic to the vFunction Server. But, the organization does not want to add the SSL Certificates to the vFunction filesystem. Instead, they want to terminate SSL at a Load Balancer in front of the vFunction Server.
Solution to the Problem
Take the following steps to terminate SSL in front of the vFunction Server:
- Download the vFunction Docker Server Installation TGZ to the VM where the vFunction Server wil lrun
- Unpack the TGZ
- Set the server.host field in the etc/sysconfig/vfunction/installation/server-installation.yaml to the value that users will access in a browser. For example, https://vfunction.organization.com
- Add the key and value FORCE_HTTP=true to the etc/sysconfig/vfunction/installation/nginx/automated-custom-env.list
- Create placeholder server.crt and server.key files
echo 'placeholder' > /etc/sysconfig/vfunction/nginx/certs/server.crt
echo 'placeholder' > /etc/sysconfig/vfunction/nginx/certs/server.key
- Install the vFunction Server
sudo bash /opt/vfunction/server-installation/install.sh
- Set the Load Balancer to terminate SSL and forward traffic to the vFunction Server over http