ClusterWare User Guide
  • 👋Welcome to ClusterWare!
  • Learning Path
    • 🔭Overview
    • 1️⃣Create a distributed NodeJS application in 10 minutes
      • Step 1: Create a new cluster
      • Step 2: Onboard servers to ClusterWare
      • Step 3: Install server software
      • Step 4: Create application instances
      • Step 5: Import application source code
      • Step 6: Start the application
      • Step 7: Create and start application load balancer
    • 2️⃣Uniformly secure access to your infrastructure
      • Step 1: Create Security Policy
      • Step 2: Install Firewall
      • Step 3: Apply Security Policies
    • 3️⃣Secure the data in-transit with SSL
      • Step 1: Gateway Security
      • Step 2: Endpoints Security
    • 4️⃣Eliminate a single point of failure in 10 minutes
      • Step 1: Onboard a new server
      • Step 2: Install Niginx
      • Step 3: Configure DNS
      • Step 4: Create and start the failover load balancer
      • Step 5: Run a load balancer outage experiment
  • Fundamentals
    • 🧩Sync, Insights, Tasks
    • 🤖Supported Technologies
    • 🛡️Server Authentication Methods
    • 💡Connectivity Troubleshooting
  • Services
    • Clusters
      • Cluster Selection & Creation
      • Editing Cluster
      • Notification Subscriptions
      • Auto-deployment (CI/CD)
    • Dashboard
      • Load Balancers & Applications
    • Servers
      • Create/Edit Server
      • Status
      • Software
      • Security
        • Enabling Non-Root Firewall Status Checking
        • Changing Firewall Status
        • Applying Security Policies
      • Metrics
      • Alerts
    • Applications
      • Create/Edit Application
      • Status
      • Git
      • Output Log / Error Log
      • Metrics
      • Alerts
    • Load Balancing
      • Create/Edit Load Balancer
      • Status
      • Gateway Security
      • Endpoint Security
    • Security Policies
      • Create/Edit Security Policy
Powered by GitBook
On this page
  • Overview
  • Key Sections
  • Certificate (cert)
  • Certificate Fingerprint
  • Certificate Key (key)
  • CA Certificates (ca-cert, optional)
  • SSL for Gateway
  • Sync Actions
  • Uploading Gateway Certificate to Host Server
  • Deleting Endpoint Certificate from Host Server
  1. Services
  2. Load Balancing

Gateway Security

PreviousStatusNextEndpoint Security

Last updated 10 months ago

Overview

Certificate Uploaded to the Host Server

Certificate Not Uploaded to the Host Server

Key Sections

Certificate (cert)

This section displays

  • Green checkmark/Red cross: an icon indicating if the Gateway Certificate exists on the load balancer host server.

  • Upload New button: To upload a new SSL certificate, click on the Upload new button next to the Certificate (cert) label.

  • Remove button: If you need to remove an existing certificate, click on the Remove button.

Certificate Fingerprint

This section displays

  • the fingerprint of the certificate present on the host server.

Certificate Key (key)

This section displays

  • Green checkmark/Red cross: an icon indicating if the Gateway Certificate Key exists on the load balancer host server.

  • Upload New button: Click on the Upload new button next to the Certificate key (key) label to upload a new key that corresponds to your SSL certificate.

  • Remove button: Click on the Remove button to delete the existing certificate key.

CA Certificates (ca-cert, optional)

This section displays

  • Green checkmark/Red cross: an icon indicating if the Gateway CA Certificate exists on the load balancer host server.

  • Upload New button: If your SSL certificate requires a CA (Certificate Authority) certificate, click on the Upload new button next to the CA Certificates (ca-cert, optional) label.

  • Remove button: Click on the Remove button to delete the existing CA certificate.

Uploading a CA certificate is optional but recommended for complete SSL chain validation.

SSL for Gateway

  • Toggle SSL for Gateway: Use the toggle switch labeled SSL for Gateway to enable or disable encryption of Internet -> Load Balancer traffic. The changes are automatically persisted to the Load Balancer settings.

Changing the SSL for Gateway setting automatically changes

  • the Load Balancer URL protocol - HTTP or HTTPS.

  • the Load Balancer Port number - 80 or 443.

Changes of the SSL for Gateway setting do not take effect until you restart the Load Balancer.

SSL for Gateway Config Statuses

  • In config: The SSL for Gateway setting is applied to the Nginx config on the server.

  • Not in config: The SSL for Gateway setting is not applied to the Nginx config on the server.

Sync Actions

  • Gateway Certificates: Syncs information displayed in all sections of this tab, including Load Balancer Config, Gateway Certificates and Endpoint Certificates status.

Uploading Gateway Certificate to Host Server

  1. Click Upload Now and paste the Gateway SSL Certificate, the Private Key and the CA Certificate in the text field provided in the respective sections.

  2. Click Upload Gateway Certificates button. This will upload the pasted certificates into appropriate locations on the host server.

  3. Wait for the sync to complete.

  4. Enable SSL for Gateway toggle.

  5. Go to the Status tab.

  6. Restart the Load Balancer for the changes to take effect.

  7. The Internet -> Load Balancer traffic now flows through HTTPS protocol.

Deleting Endpoint Certificate from Host Server

To delete the Endpoint Certificate and the Certificate Key or click Remove on individual certificates.

terminate the Load Balancer in the Status tab