You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/network/load_balancer/create_http_https/guide.en-gb.md
+49-47Lines changed: 49 additions & 47 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
title: "Configuration of an OVHcloud Load Balancer service with HTTP/HTTPS"
3
3
excerpt: "Configure your OVHcloud Load Balancer to distribute HTTP traffic and secure your connections with HTTPS"
4
-
updated: 2025-11-06
4
+
updated: 2025-11-07
5
5
---
6
6
7
7
<style>
@@ -27,24 +27,24 @@ This guide aims to help you create your first HTTP/HTTPS service using the OVHcl
27
27
28
28
A frontend will be created to listen on port 80, while another will listen on port 443 with an SSL/TLS certificate. These frontends will be configured to direct their traffic to a common HTTP farm. This farm can have one or more servers, depending on the chosen / adapted configuration.
29
29
30
-
As a reminder, the OVHcloud Load Balancer service is composed of 4 elementary parts:
30
+
As a reminder, the OVHcloud Load Balancer service is composed of 4 elementary parts:
31
31
32
-
- the `frontends`;
33
-
- the `farms` of servers and their `servers`;
34
-
- the advanced `routes` between Frontends and Server Farms;
32
+
- the `frontends`;
33
+
- the `farms` of servers and their `servers`;
34
+
- the advanced `routes` between Frontends and Server Farms;
35
35
- the `SSL/TLS` certificates allowing TCP and/or HTTP connections to be encrypted.
36
36
37
37
## Requirements
38
38
39
-
- Have an [OVHcloud Load balancer](/links/network/load-balancer) offer in your OVHcloud account.
40
-
-Be logged in to your [OVHcloud Control Panel](/links/manager).
39
+
- Have an [OVHcloud Load balancer](/links/network/load-balancer) offer in your OVHcloud account
40
+
-You must be logged in to your [OVHcloud Control Panel](/links/manager)
41
41
- Have a configured farm
42
42
- Have a configured frontend
43
43
- Have an SSL certificate
44
44
45
45
## Instructions
46
46
47
-
**Table of contents**
47
+
## Table of contents
48
48
49
49
-[Add a server farm](#farm)
50
50
-[Add a server](#server)
@@ -65,13 +65,13 @@ Before you start, it is recommended to consult the [OVHcloud Load Balancer prese
65
65
> The order of element creation is important. In particular, server farms must be configured before being able to attach an SSL/TLS certificate or servers to them. Similarly, frontends must be configured after the server farms in order to be able to configure the frontend's default farm.
66
66
>
67
67
68
-
The features detailed below are accessible from the OVHcloud Control Panel:
68
+
The features detailed below are accessible from the OVHcloud Control Panel:
For more information on the features of the OVHcloud Control Panel, consult the page « [Managing the Load Balancer service via the Control Panel](/pages/network/load_balancer/use-lb)».
72
+
For more information about the features of the OVHcloud Control Panel, see the [Managing the Load Balancer service via the OVHcloud Control Panel](/pages/network/load_balancer/use-lb)page.
73
73
74
-
Via the OVHcloud API, use the following call:
74
+
Via the OVHcloud API, use the following call:
75
75
76
76
> [!api]
77
77
>
@@ -86,51 +86,51 @@ We will add an HTTP server farm to our service. This part is responsible for dis
86
86
87
87
#### From the OVHcloud Control Panel
88
88
89
-
In the `Server Farms`{.action} tab, click on the `Add a server farm`{.action} button.
89
+
In the `Server Farms`{.action} tab, click the `Add a server farm`{.action} button.
90
90
91
91
Fill in the fields. The only mandatory fields for a simple configuration are the *Protocol* and the *Datacentre*. It is recommended to explicitly define a *Port*, generally port 80 for a web service. If no port is specified, your OVHcloud Load Balancer will automatically use the same port as the corresponding frontend and the probes may not work as expected.
92
92
93
93
If you add several servers in your farm, it is recommended to configure an HTTP `availability probe`. When a probe is configured, the OVHcloud Load Balancer service can automatically disable a server that is down or under maintenance, in order not to affect visitors.
94
94
95
95
{.thumbnail}
96
96
97
-
Click on the `Add`{.action} button once the fields are filled in.
97
+
Click the `Add`{.action} button once you have filled in the fields.
98
98
99
99
Your server farm should appear in the list, under the `Server Farms`{.action} tab.
100
100
101
101
{.thumbnail}
102
102
103
103
#### From the OVHcloud API
104
104
105
-
- List of HTTP server farms:
105
+
- List of HTTP server farms:
106
106
107
107
> [!api]
108
108
>
109
109
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm
110
110
>
111
111
112
-
- Details of a specific HTTP server:
112
+
- Details of a specific HTTP server:
113
113
114
114
> [!api]
115
115
>
116
116
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm/{farmId}
117
117
>
118
118
119
-
- Adding a new HTTP server farm:
119
+
- Adding a new HTTP server farm:
120
120
121
121
> [!api]
122
122
>
123
123
> @api {v1} /ipLoadbalancing POST /ipLoadbalancing/{serviceName}/http/farm
124
124
>
125
125
126
-
- Modifying a specific server farm:
126
+
- Modifying a specific server farm:
127
127
128
128
> [!api]
129
129
>
130
130
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/http/farm/{farmId}
131
131
>
132
132
133
-
- Deleting a specific server farm:
133
+
- Deleting a specific server farm:
134
134
135
135
> [!api]
136
136
>
@@ -143,49 +143,49 @@ We will now add a server to our server farm.
143
143
144
144
#### From the OVHcloud Control Panel
145
145
146
-
Still in the `Server Farms`{.action} tab, select the farm to which you want to add a server by clicking on the corresponding line. The list of servers already configured in the farm appears below the list of farms, as well as a`Add a server`{.action} button. Click on this button to add a new server.
146
+
Still in the `Server Farms`{.action} tab, select the farm to which you want to add a server by clicking on the corresponding line. The list of servers already configured in the farm appears below the list of farms, as well as the`Add a server`{.action} button. Click on this button to add a new server.
147
147
148
148
Only the *IPv4 Address* field is mandatory. If a server does not use the same port as the one defined above in the farm, it is possible to override it in the server configuration. However, in order to maintain the most homogeneous and maintainable configuration possible, it is recommended to use this parameter only in advanced cases.
149
149
150
150
{.thumbnail}
151
151
152
-
Click on the `Add`{.action} button once the fields are filled in.
152
+
Click the `Add`{.action} button once you have filled in the fields.
153
153
154
154
Your server should appear in the list of servers, in the `Server Farms`{.action} tab, just below the list of farms.
155
155
156
156
{.thumbnail}
157
157
158
158
#### From the OVHcloud API
159
159
160
-
- List of servers in the farm:
160
+
- List of servers in the farm:
161
161
162
162
> [!api]
163
163
>
164
164
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server
165
165
>
166
166
167
-
- Details of a specific server:
167
+
- Details of a specific server:
168
168
169
169
> [!api]
170
170
>
171
171
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server/{serverId}
172
172
>
173
173
174
-
- Adding a new server:
174
+
- Adding a new server:
175
175
176
176
> [!api]
177
177
>
178
178
> @api {v1} /ipLoadbalancing POST /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server
179
179
>
180
180
181
-
- Modifying a specific server:
181
+
- Modifying a specific server:
182
182
183
183
> [!api]
184
184
>
185
185
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server
186
186
>
187
187
188
-
- Deleting a specific server:
188
+
- Deleting a specific server:
189
189
190
190
> [!api]
191
191
>
@@ -198,51 +198,51 @@ We will now add a `frontend` to our service and connect it to our server farm. T
198
198
199
199
#### From the OVHcloud Control Panel
200
200
201
-
In the `Frontends`{.action} tab, click on the `Add a frontend`{.action} button.
201
+
In the `Frontends`{.action} tab, click the `Add a frontend`{.action} button.
202
202
203
203
Fill in the fields. The only mandatory fields for a simple configuration are the *Protocol*, the *Port* (80 for a standard HTTP web service) and the *Datacentre*. If you want your service to be available on several ports at the same time, you can specify a list of ports separated by commas or a range of ports in the form "START_PORT-END_PORT".
204
204
205
205
If you have routed Additional IPs to your OVHcloud Load Balancer service, you can also attach a frontend to one or more specific Additional IPs.
206
206
207
207
{.thumbnail}
208
208
209
-
Click on the `Add`{.action} button once the fields are filled in.
209
+
Click the `Add`{.action} button once you have filled in the fields.
210
210
211
211
Your frontend should appear in the list, under the `Frontends`{.action} tab.
212
212
213
213
{.thumbnail}
214
214
215
215
#### From the OVHcloud API
216
216
217
-
- List of HTTP frontends:
217
+
- List of HTTP frontends:
218
218
219
219
> [!api]
220
220
>
221
221
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/frontend
222
222
>
223
223
224
-
- Details of a specific frontend:
224
+
- Details of a specific frontend:
225
225
226
226
> [!api]
227
227
>
228
228
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/frontend/{frontendId}
229
229
>
230
230
231
-
- Adding a new frontend:
231
+
- Adding a new frontend:
232
232
233
233
> [!api]
234
234
>
235
235
> @api {v1} /ipLoadbalancing POST /ipLoadbalancing/{serviceName}/http/frontend
236
236
>
237
237
238
-
- Modifying a specific frontend:
238
+
- Modifying a specific frontend:
239
239
240
240
> [!api]
241
241
>
242
242
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/http/frontend/{frontendId}
243
243
>
244
244
245
-
- Deleting a specific frontend:
245
+
- Deleting a specific frontend:
246
246
247
247
> [!api]
248
248
>
@@ -251,20 +251,20 @@ Your frontend should appear in the list, under the `Frontends`{.action} tab.
251
251
252
252
### Add an SSL/TLS certificate <aname="certificate"></a>
253
253
254
-
The previous section described the general configuration for an HTTP frontend. This section describes the additional steps to enable support for the HTTPS protocol on an HTTP frontend. In particular, you will need to:
254
+
The previous section described the general configuration for an HTTP frontend. This section describes the additional steps to enable support for the HTTPS protocol on an HTTP frontend. In particular, you will need to:
255
255
256
-
- switch the frontend to port 443, the standard port for the HTTPS protocol;
256
+
- switch the frontend to port 443, the standard port for the HTTPS protocol;
257
257
- configure an SSL/TLS certificate to authenticate and encrypt the connections.
258
258
259
-
Whether you choose a configuration via the API or via the OVHcloud Control Panel, you will have a choice between 2 strategies for your SSL/TLS certificates. This choice depends on your needs as well as the current solutions in place:
259
+
Whether you choose a configuration via the API or via the OVHcloud Control Panel, you will have a choice between 2 strategies for your SSL/TLS certificates. This choice depends on your needs as well as the current solutions in place:
260
260
261
261
- Import an existing SSL/TLS certificate.
262
262
- Order an automatically managed SSL/TLS certificate. The ordering of DV and EV certificates will be available soon.
263
263
264
264
If you choose to import an SSL/TLS certificate that you have ordered and managed yourself, you will have to renew it periodically yourself and update it in your OVHcloud Load Balancer service. Most certificates are valid for 1 year. Some may be valid for longer. Let's Encrypt certificates are valid for 3 months. It is recommended to use the service managed automatically by your OVHcloud Load Balancer for Let's Encrypt certificates in order not to accidentally miss a deadline.
265
265
266
266
If you choose a certificate managed by your OVHcloud Load Balancer service, it will be automatically ordered, validated, installed and renewed periodically by your OVHcloud Load Balancer.<br>
267
-
For the validation and renewal operations to work, it is necessary that the domain(s) for which you order this certificate are routed to your OVHcloud Load Balancer service. This implies that the *A* and *AAAA* fields of your domain point respectively to the IPv4 and IPv6 of your OVHcloud Load Balancer or one of its Additional IPs. During the order, you will receive an email that will guide you through the validation steps.
267
+
For the validation and renewal operations to work, the domain(s) you are ordering this certificate for must be routed to your OVHcloud Load Balancer service. This implies that the *A* and *AAAA* fields of your domain point respectively to the IPv4 and IPv6 of your OVHcloud Load Balancer or one of its Additional IPs. During the order, you will receive an email that will guide you through the validation steps.
268
268
269
269
> [!primary]
270
270
>
@@ -275,12 +275,15 @@ For the validation and renewal operations to work, it is necessary that the doma
275
275
The certificates configured on your OVHcloud Load Balancer service are automatically available for all frontends of your OVHcloud Load Balancer service on which the *SSL* option is enabled.
276
276
277
277
#### TLS 1.3 support
278
+
278
279
With the constant evolution of security standards on the Internet, OVHcloud is committed to providing the most recent and secure technologies for your services. The OVHcloud Load Balancer now supports TLS 1.3.
279
280
280
-
##### What is TLS 1.3 ?
281
+
##### **What is TLS 1.3?**
282
+
281
283
TLS 1.3 is the latest version of the TLS protocol, offering significant improvements in terms of security and performance compared to TLS 1.2. The key advantages include a faster *handshake* process, thus reducing the time needed to establish secure connections, and the use of safer encryption suites to strengthen the security of transmitted data.
282
284
283
-
##### Why use TLS 1.3 with OVHcloud Load Balancer ?
285
+
##### **Why use TLS 1.3 with OVHcloud Load Balancer?**
286
+
284
287
By integrating TLS 1.3, your OVHcloud Load Balancer will benefit from enhanced security and improved performance, ensuring an optimal user experience for your visitors. The reduction in *handshake* time speeds up page loading, while the security improvements ensure that your data is protected with the most recent and secure standards.
285
288
286
289
#### From the OVHcloud Control Panel
@@ -291,7 +294,7 @@ The list of SSL/TLS certificates configured on your OVHcloud Load Balancer servi
291
294
292
295
If you choose to import an existing SSL/TLS certificate, click on `Add an SSL certificate`{.action}. The *Private Key* and *Certificate* fields are mandatory.
293
296
294
-
Click on the `Add`{.action} button once the fields are filled in. Your certificate will then appear in the certificate list.
297
+
Click the `Add`{.action} button once the fields are filled in. Your certificate will then appear in the certificate list.
295
298
296
299
{.thumbnail}
297
300
@@ -303,27 +306,26 @@ Once your certificate(s) are configured, you can create an HTTPS frontend, on th
303
306
Optionally, you can also enable the *HSTS* option. If this option is enabled, browsers will record that this website should *never again* be visited without HTTPS after their first visit in HTTPS. This strengthens overall security by protecting against "Man-in-the-middle" attacks in which a malicious actor could make your website appear unavailable in HTTPS and force your visitors to switch to "HTTP".
304
307
305
308
> [!warning]
306
-
>
307
309
> Although the added security is significant, it is recommended to wait a while before enabling this option, to make sure there are no side effects in HTTPS. Indeed, once HSTS is enabled, there is no going back.
308
310
>
309
311
310
312
#### From the OVHcloud API
311
313
312
-
- List the existing SSL/TLS certificates:
314
+
- List the existing SSL/TLS certificates:
313
315
314
316
> [!api]
315
317
>
316
318
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/ssl
317
319
>
318
320
319
-
- Get the details of an SSL/TLS certificate:
321
+
- Get the details of an SSL/TLS certificate:
320
322
321
323
> [!api]
322
324
>
323
325
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/ssl/{id}
324
326
>
325
327
326
-
- Adding a new existing SSL/TLS certificate:
328
+
- Adding a new existing SSL/TLS certificate:
327
329
328
330
> [!api]
329
331
>
@@ -337,7 +339,7 @@ Optionally, you can also enable the *HSTS* option. If this option is enabled, br
337
339
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/ssl/{id}
338
340
>
339
341
340
-
- Deleting a specific SSL/TLS certificate:
342
+
- Deleting a specific SSL/TLS certificate:
341
343
342
344
> [!api]
343
345
>
@@ -352,7 +354,7 @@ If you have several zones, you will have to apply the same configuration for eac
352
354
353
355
#### From the OVHcloud Control Panel
354
356
355
-
Go to the home page of your OVHcloud Load Balancer service and click on the `Apply the configuration`{.action} button.
357
+
Go to the home page of your OVHcloud Load Balancer service, click on the `...`{.action} dots next to the name of your service and click on `Apply the configuration`{.action}.
356
358
357
359
{.thumbnail}
358
360
@@ -362,7 +364,7 @@ Then select the list of zones you want to deploy and click on the `Apply the con
362
364
363
365
#### From the OVHcloud API
364
366
365
-
- Refresh a zone:
367
+
- Refresh a zone:
366
368
367
369
> [!api]
368
370
>
@@ -375,4 +377,4 @@ Once all these steps are completed, you should have a functional load balancing
0 commit comments