SSL Module on Load Balancer

Question

SSL Module on Load Balancer

Red Vania 6

Hi there, If I have my SSL Cert Terminating at the Load Balancer, what happens to traffic between the Load Balancer and WebServers?
Will they be unencrypted? How can I secure that communication (LB <--> IIS), please advice
I am using Cisco Load Balancers
Thanks

Lex Li (Microsoft) 6,037 Reputation points Microsoft Employee

2021-07-14T15:12:40.123+00:00

If you use a tool like Wireshark to analyze the traffic, encrypted or not should be obvious. Only Cisco can answer inquiries on its own load balancer configuration, not here by the Microsoft community.

1 answer

Your answer

Lex Li (Microsoft) 6,037 Reputation points Microsoft Employee

2021-07-14T15:12:40.123+00:00

If you use a tool like Wireshark to analyze the traffic, encrypted or not should be obvious. Only Cisco can answer inquiries on its own load balancer configuration, not here by the Microsoft community.

Answer 1

Hi @Red Vania ,

If load balancer and IIS are in the same data center, it is safe and no need to take any action.

SSL termination unencrypted traffic is sent between the load balancer and the backend server on the local area network. However, for security purposes, administrators can choose to re-encrypt the traffic at the load balancer before sending it to the servers.

If you want to secure the communication, you can use a self-signed SSL between the load balancer and IIS. This provides a secure connection, but requires more compute power.

If the answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our  documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Best regards,
Bruce Zhang

Share via

SSL Module on Load Balancer

1 answer

Your answer