...

SSL Offloading feature allows loadbalancers to handle encryption/decryption of HTTP(s) traffic giving plaintext HTTP to the backend servers freeing them from the resource intensive task of handling encryption/decryption. Major loadblancers like the Netscaler and F5 have this functionality.

Goals

1. Add a new entity SSLCerts which will be linked to an account.
2. A user should be able to create/update/delete SSL certs for his account.
3. Certificates can be searched by using either the certificate ID or the account ID.
4. A user can attach/remove Attach/Remove a certificate from a loadbalancers which support SSL offload feature.
5. Add support for Netscaler to use this feature.

References

TODO

Document History

Functional requirements & non-requirements

1. Introduce a new entity SSLCerts linked to a user account
2. Users should be able to Add/Delete/List certificates linked to their account
3. Admin should be able to list all the certificates for all accounts
4. When creating a loadbalancer if the public port is 443 and the private port is 80, then
5. if the loadbalancer device supports SSL offloading,
6. the loadbalncer created should be of type SSL
7. should allow binding/unbinding of a SSL certificate to it.
8. if the loadblancner device does not support ssl offlosd
9. trying to bind a certificate to it should generate an error

1. Users should be able to attach/remove certificate from a

Architecture and Design description

...