This step-by-step setup of Virtual Services leverages the application template for Scality Ring.

The table in each section outlines the settings configured by the application template. You can use this information to manually configure Virtual Services or using the LoadMaster Application Programming Interface (API) and automation tools.

There are four supported configurations:

  • Un-Encrypted: The connections from the application/client to the storage will not be encrypted by SSL/TLS.

  • TLS pass-through: The SSL/TLS certificate is installed on Scality Ring as a custom server certificate.

  • TLS termination and reencryption: This might be beneficial if you are already doing TLS/SSL certificate management on the load balancer rather than installing the SSL certificate on Scality Ring. This configuration provides the additional security benefit of limiting the attack surface to the LoadMaster.

  • SSL termination with HTTP: In this configuration, TLS is terminated on the LoadMaster and communication from the LoadMaster to Scality Ring is non-encrypted to take advantage of TLS offload.