• Created by Unknown User (weizhou), last updated on Aug 19, 2025 1 minute read

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »


1. Objectives


The SSL termination (SSL offloading) feature was introduced in Apache CloudStack 4.13.

    Bug: https://issues.apache.org/jira/browse/CLOUDSTACK-4821
    FS: https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSL+Termination+Support

However, this feature is only implemented for Citrix Netscaler by commit https://github.com/apache/cloudstack/commit/0076307


This improvement derives from a feature design in Apache CloudStack 4.15:  VR haproxy customization in CloudStack (which is not merged)

2. High Level Design


This improves SSL offloading feature which includes

  • Manage SSL certificate for accounts on GUI
  • Support LB protocol "SSL" when VR is used as LB provider in the network
  • Reconfigure HAproxy with sslcerts in VRs when ssl certs is assigned to a LB


3. Implementation

This described some details of the implementation

3.1 database change


None.

3.2 UI changes


3.3 Haproxy configuration for SSL certificate in Virtual Router


example of haproxy.cfg


4. Test plan


- (Optional) Generate self-signed certificate



  • No labels