Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


There are many ways to secure an application.

...

Another way of securing the application is to use SSL Offloading. Basically we delegate the functions required for SSL/TLS, namely the handshake and the encryption/decryption to a dedicated component in front of the user. So all the servers behind the reverse proxy communicate as usual.

More precisely it is called SSL Termination in this case :

The proxy server/load balancer we use for the SSL offloading acts as the SSL terminator. When a client attempts to connect to Datafari, the client still has a secure connection with the SSL terminator, which is acting as a pass-through.


The Datafari architecture is like this for monoserver and multiservers :

Gliffy
imageAttachmentIdatt572489754
baseUrlhttps://datafari.atlassian.net/wiki
macroIdb553e23b-98ac-4b71-b892-ae1aead5d1c7
namearchitecture_apache_monoserver
diagramAttachmentIdatt572915738
containerId572981249
timestamp1551367212427

...