Introduction

SSL Offloading feature allows loadbalancers to handle encryption/decryption of HTTP(s) traffic giving plaintext HTTP to the backend servers freeing them from the resource intensive task of handling encryption/decryption. Major loadblancers like the Netscaler and F5 have this functionality.

Goals

  1. Add a new entity SSLCerts which will be linked to an account.
  2. A user should be able to create/update/delete SSL certs for his account.
  3. Certificates can be searched by using either the certificate ID or the account ID.
  4. A user can attach/remove a certificate from a loadbalancers which support SSL offload feature.

Document History

Version

Author

Date

Changes

V1.0

Syed Ahmed

07-Oct-2013

Initial Draft

Architecture and Design description

TODO Document Design

Web Service APIs

TODO Document APIs

UI flow

Right now, this feature will only be available via the API. UI support is not yet scoped.

IP Clearance

No external dependecies are being added for this feature. All code will be developed within Cloudstack’s scope.