If your services need to transmit sensitive data, such as user information or identity information, or you want to improve service security, you can add an HTTPS listener to your Edge Load Balancer (ELB) instance. HTTPS listeners can forward HTTPS requests over encrypted connections.
Prerequisites
An ELB instance is created. For more information, see Create an ELB instance.
-
To configure an HTTPS listener, you need a server certificate. You can use a certificate from Certificate Management Service or upload a server certificate and its CA certificate from a third party. For more information, see SSL Certificates.
Procedure
Log on to the ENS console.
-
On the ELB Instance management page, find the target instance and click Listener Configuration in the Actions column.
-
On the Listener tab, click Add Listener.
-
Configure the following parameters.
Parameter
Description
Listener Name
Specify a name for the listener.
Load balancing protocol
Select HTTPS.
Listening Port
Specify a listening port that is used by ELB to receive requests and forward the requests to backend servers. Valid values: 1 to 65535.
NoteWe recommend that you use port 443 for HTTPS.
Advanced Settings
NoteClick Modify to expand the advanced settings.
Scheduling Algorithm
-
Weighted Round-Robin (WRR): Backend servers with higher weights receive more requests than those with lower weights.
-
Weighted Least Connections (WLC): In addition to server weights, this scheduling algorithm also considers the real-time load (number of active connections) of each backend server. If multiple servers share the same weight, the one with the fewest connections receives the next request.
-
Round-Robin (RR): Requests are distributed to backend servers sequentially.
Idle Connection Timeout Period
If no request is received within the specified timeout period, ELB closes the connection. When a request is received, ELB establishes a new connection.
Connection Request Timeout Period
If the backend server does not respond within the timeout period, ELB returns the HTTP 504 error code to the client.
Obtain Client IP Address
Specify whether to preserve the IP addresses of clients. Only Layer 4 listeners support this feature. By default, this feature is enabled.
-
-
Click Next to configure the health check. For details about the parameters, see Health check.
NoteIf you set the ELB Protocol parameter to HTTPS, make sure that you have uploaded a server certificate on the health check page.
-
After you configure the health check, click Next. Confirm that the configuration information is correct, and then click Create.
-
After the configuration is complete, you need to manually start the load balancer listener. On the Listener tab, click Enable in the Actions column.