Skip to content

Commit 1e9c49a

Browse files
authored
first proof guide.en-gb.md
1 parent d821377 commit 1e9c49a

File tree

1 file changed

+49
-47
lines changed

1 file changed

+49
-47
lines changed

pages/network/load_balancer/create_http_https/guide.en-gb.md

Lines changed: 49 additions & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Configuration of an OVHcloud Load Balancer service with HTTP/HTTPS"
33
excerpt: "Configure your OVHcloud Load Balancer to distribute HTTP traffic and secure your connections with HTTPS"
4-
updated: 2025-11-06
4+
updated: 2025-11-07
55
---
66

77
<style>
@@ -27,24 +27,24 @@ This guide aims to help you create your first HTTP/HTTPS service using the OVHcl
2727

2828
A frontend will be created to listen on port 80, while another will listen on port 443 with an SSL/TLS certificate. These frontends will be configured to direct their traffic to a common HTTP farm. This farm can have one or more servers, depending on the chosen / adapted configuration.
2929

30-
As a reminder, the OVHcloud Load Balancer service is composed of 4 elementary parts :
30+
As a reminder, the OVHcloud Load Balancer service is composed of 4 elementary parts:
3131

32-
- the `frontends` ;
33-
- the `farms` of servers and their `servers` ;
34-
- the advanced `routes` between Frontends and Server Farms ;
32+
- the `frontends`;
33+
- the `farms` of servers and their `servers`;
34+
- the advanced `routes` between Frontends and Server Farms;
3535
- the `SSL/TLS` certificates allowing TCP and/or HTTP connections to be encrypted.
3636

3737
## Requirements
3838

39-
- Have an [OVHcloud Load balancer](/links/network/load-balancer) offer in your OVHcloud account.
40-
- Be logged in to your [OVHcloud Control Panel](/links/manager).
39+
- Have an [OVHcloud Load balancer](/links/network/load-balancer) offer in your OVHcloud account
40+
- You must be logged in to your [OVHcloud Control Panel](/links/manager)
4141
- Have a configured farm
4242
- Have a configured frontend
4343
- Have an SSL certificate
4444

4545
## Instructions
4646

47-
**Table of contents**
47+
## Table of contents
4848

4949
- [Add a server farm](#farm)
5050
- [Add a server](#server)
@@ -65,13 +65,13 @@ Before you start, it is recommended to consult the [OVHcloud Load Balancer prese
6565
> The order of element creation is important. In particular, server farms must be configured before being able to attach an SSL/TLS certificate or servers to them. Similarly, frontends must be configured after the server farms in order to be able to configure the frontend's default farm.
6666
>
6767
68-
The features detailed below are accessible from the OVHcloud Control Panel :
68+
The features detailed below are accessible from the OVHcloud Control Panel:
6969

7070
![OVHcloud Load Balancer Service](images/iplb_service.png){.thumbnail}
7171

72-
For more information on the features of the OVHcloud Control Panel, consult the page « [Managing the Load Balancer service via the Control Panel](/pages/network/load_balancer/use-lb) ».
72+
For more information about the features of the OVHcloud Control Panel, see the [Managing the Load Balancer service via the OVHcloud Control Panel](/pages/network/load_balancer/use-lb) page.
7373

74-
Via the OVHcloud API, use the following call :
74+
Via the OVHcloud API, use the following call:
7575

7676
> [!api]
7777
>
@@ -86,51 +86,51 @@ We will add an HTTP server farm to our service. This part is responsible for dis
8686

8787
#### From the OVHcloud Control Panel
8888

89-
In the `Server Farms`{.action} tab, click on the `Add a server farm`{.action} button.
89+
In the `Server Farms`{.action} tab, click the `Add a server farm`{.action} button.
9090

9191
Fill in the fields. The only mandatory fields for a simple configuration are the *Protocol* and the *Datacentre*. It is recommended to explicitly define a *Port*, generally port 80 for a web service. If no port is specified, your OVHcloud Load Balancer will automatically use the same port as the corresponding frontend and the probes may not work as expected.
9292

9393
If you add several servers in your farm, it is recommended to configure an HTTP `availability probe`. When a probe is configured, the OVHcloud Load Balancer service can automatically disable a server that is down or under maintenance, in order not to affect visitors.
9494

9595
![Adding a server farm via the OVHcloud Control Panel](images/add_backend.png){.thumbnail}
9696

97-
Click on the `Add`{.action} button once the fields are filled in.
97+
Click the `Add`{.action} button once you have filled in the fields.
9898

9999
Your server farm should appear in the list, under the `Server Farms`{.action} tab.
100100

101101
![Details of the created server farm](images/resume_backend.png){.thumbnail}
102102

103103
#### From the OVHcloud API
104104

105-
- List of HTTP server farms :
105+
- List of HTTP server farms:
106106

107107
> [!api]
108108
>
109109
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm
110110
>
111111
112-
- Details of a specific HTTP server :
112+
- Details of a specific HTTP server:
113113

114114
> [!api]
115115
>
116116
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm/{farmId}
117117
>
118118
119-
- Adding a new HTTP server farm :
119+
- Adding a new HTTP server farm:
120120

121121
> [!api]
122122
>
123123
> @api {v1} /ipLoadbalancing POST /ipLoadbalancing/{serviceName}/http/farm
124124
>
125125
126-
- Modifying a specific server farm :
126+
- Modifying a specific server farm:
127127

128128
> [!api]
129129
>
130130
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/http/farm/{farmId}
131131
>
132132
133-
- Deleting a specific server farm :
133+
- Deleting a specific server farm:
134134

135135
> [!api]
136136
>
@@ -143,49 +143,49 @@ We will now add a server to our server farm.
143143

144144
#### From the OVHcloud Control Panel
145145

146-
Still in the `Server Farms`{.action} tab, select the farm to which you want to add a server by clicking on the corresponding line. The list of servers already configured in the farm appears below the list of farms, as well as a `Add a server`{.action} button. Click on this button to add a new server.
146+
Still in the `Server Farms`{.action} tab, select the farm to which you want to add a server by clicking on the corresponding line. The list of servers already configured in the farm appears below the list of farms, as well as the `Add a server`{.action} button. Click on this button to add a new server.
147147

148148
Only the *IPv4 Address* field is mandatory. If a server does not use the same port as the one defined above in the farm, it is possible to override it in the server configuration. However, in order to maintain the most homogeneous and maintainable configuration possible, it is recommended to use this parameter only in advanced cases.
149149

150150
![Adding a server to a Farm.](images/add_server.png){.thumbnail}
151151

152-
Click on the `Add`{.action} button once the fields are filled in.
152+
Click the `Add`{.action} button once you have filled in the fields.
153153

154154
Your server should appear in the list of servers, in the `Server Farms`{.action} tab, just below the list of farms.
155155

156156
![Details of the created server.](images/resume_server.png){.thumbnail}
157157

158158
#### From the OVHcloud API
159159

160-
- List of servers in the farm :
160+
- List of servers in the farm:
161161

162162
> [!api]
163163
>
164164
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server
165165
>
166166
167-
- Details of a specific server :
167+
- Details of a specific server:
168168

169169
> [!api]
170170
>
171171
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server/{serverId}
172172
>
173173
174-
- Adding a new server :
174+
- Adding a new server:
175175

176176
> [!api]
177177
>
178178
> @api {v1} /ipLoadbalancing POST /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server
179179
>
180180
181-
- Modifying a specific server :
181+
- Modifying a specific server:
182182

183183
> [!api]
184184
>
185185
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/http/farm/{farmId}/server
186186
>
187187
188-
- Deleting a specific server :
188+
- Deleting a specific server:
189189

190190
> [!api]
191191
>
@@ -198,51 +198,51 @@ We will now add a `frontend` to our service and connect it to our server farm. T
198198

199199
#### From the OVHcloud Control Panel
200200

201-
In the `Frontends`{.action} tab, click on the `Add a frontend`{.action} button.
201+
In the `Frontends`{.action} tab, click the `Add a frontend`{.action} button.
202202

203203
Fill in the fields. The only mandatory fields for a simple configuration are the *Protocol*, the *Port* (80 for a standard HTTP web service) and the *Datacentre*. If you want your service to be available on several ports at the same time, you can specify a list of ports separated by commas or a range of ports in the form "START_PORT-END_PORT".
204204

205205
If you have routed Additional IPs to your OVHcloud Load Balancer service, you can also attach a frontend to one or more specific Additional IPs.
206206

207207
![Adding a frontend](images/add_frontend.png){.thumbnail}
208208

209-
Click on the `Add`{.action} button once the fields are filled in.
209+
Click the `Add`{.action} button once you have filled in the fields.
210210

211211
Your frontend should appear in the list, under the `Frontends`{.action} tab.
212212

213213
![Details of the created frontend](images/resume_frontend.png){.thumbnail}
214214

215215
#### From the OVHcloud API
216216

217-
- List of HTTP frontends :
217+
- List of HTTP frontends:
218218

219219
> [!api]
220220
>
221221
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/frontend
222222
>
223223
224-
- Details of a specific frontend :
224+
- Details of a specific frontend:
225225

226226
> [!api]
227227
>
228228
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/http/frontend/{frontendId}
229229
>
230230
231-
- Adding a new frontend :
231+
- Adding a new frontend:
232232

233233
> [!api]
234234
>
235235
> @api {v1} /ipLoadbalancing POST /ipLoadbalancing/{serviceName}/http/frontend
236236
>
237237
238-
- Modifying a specific frontend :
238+
- Modifying a specific frontend:
239239

240240
> [!api]
241241
>
242242
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/http/frontend/{frontendId}
243243
>
244244
245-
- Deleting a specific frontend :
245+
- Deleting a specific frontend:
246246

247247
> [!api]
248248
>
@@ -251,20 +251,20 @@ Your frontend should appear in the list, under the `Frontends`{.action} tab.
251251
252252
### Add an SSL/TLS certificate <a name="certificate"></a>
253253

254-
The previous section described the general configuration for an HTTP frontend. This section describes the additional steps to enable support for the HTTPS protocol on an HTTP frontend. In particular, you will need to :
254+
The previous section described the general configuration for an HTTP frontend. This section describes the additional steps to enable support for the HTTPS protocol on an HTTP frontend. In particular, you will need to:
255255

256-
- switch the frontend to port 443, the standard port for the HTTPS protocol ;
256+
- switch the frontend to port 443, the standard port for the HTTPS protocol;
257257
- configure an SSL/TLS certificate to authenticate and encrypt the connections.
258258

259-
Whether you choose a configuration via the API or via the OVHcloud Control Panel, you will have a choice between 2 strategies for your SSL/TLS certificates. This choice depends on your needs as well as the current solutions in place :
259+
Whether you choose a configuration via the API or via the OVHcloud Control Panel, you will have a choice between 2 strategies for your SSL/TLS certificates. This choice depends on your needs as well as the current solutions in place:
260260

261261
- Import an existing SSL/TLS certificate.
262262
- Order an automatically managed SSL/TLS certificate. The ordering of DV and EV certificates will be available soon.
263263

264264
If you choose to import an SSL/TLS certificate that you have ordered and managed yourself, you will have to renew it periodically yourself and update it in your OVHcloud Load Balancer service. Most certificates are valid for 1 year. Some may be valid for longer. Let's Encrypt certificates are valid for 3 months. It is recommended to use the service managed automatically by your OVHcloud Load Balancer for Let's Encrypt certificates in order not to accidentally miss a deadline.
265265

266266
If you choose a certificate managed by your OVHcloud Load Balancer service, it will be automatically ordered, validated, installed and renewed periodically by your OVHcloud Load Balancer.<br>
267-
For the validation and renewal operations to work, it is necessary that the domain(s) for which you order this certificate are routed to your OVHcloud Load Balancer service. This implies that the *A* and *AAAA* fields of your domain point respectively to the IPv4 and IPv6 of your OVHcloud Load Balancer or one of its Additional IPs. During the order, you will receive an email that will guide you through the validation steps.
267+
For the validation and renewal operations to work, the domain(s) you are ordering this certificate for must be routed to your OVHcloud Load Balancer service. This implies that the *A* and *AAAA* fields of your domain point respectively to the IPv4 and IPv6 of your OVHcloud Load Balancer or one of its Additional IPs. During the order, you will receive an email that will guide you through the validation steps.
268268

269269
> [!primary]
270270
>
@@ -275,12 +275,15 @@ For the validation and renewal operations to work, it is necessary that the doma
275275
The certificates configured on your OVHcloud Load Balancer service are automatically available for all frontends of your OVHcloud Load Balancer service on which the *SSL* option is enabled.
276276

277277
#### TLS 1.3 support
278+
278279
With the constant evolution of security standards on the Internet, OVHcloud is committed to providing the most recent and secure technologies for your services. The OVHcloud Load Balancer now supports TLS 1.3.
279280

280-
##### What is TLS 1.3 ?
281+
##### **What is TLS 1.3?**
282+
281283
TLS 1.3 is the latest version of the TLS protocol, offering significant improvements in terms of security and performance compared to TLS 1.2. The key advantages include a faster *handshake* process, thus reducing the time needed to establish secure connections, and the use of safer encryption suites to strengthen the security of transmitted data.
282284

283-
##### Why use TLS 1.3 with OVHcloud Load Balancer ?
285+
##### **Why use TLS 1.3 with OVHcloud Load Balancer?**
286+
284287
By integrating TLS 1.3, your OVHcloud Load Balancer will benefit from enhanced security and improved performance, ensuring an optimal user experience for your visitors. The reduction in *handshake* time speeds up page loading, while the security improvements ensure that your data is protected with the most recent and secure standards.
285288

286289
#### From the OVHcloud Control Panel
@@ -291,7 +294,7 @@ The list of SSL/TLS certificates configured on your OVHcloud Load Balancer servi
291294

292295
If you choose to import an existing SSL/TLS certificate, click on `Add an SSL certificate`{.action}. The *Private Key* and *Certificate* fields are mandatory.
293296

294-
Click on the `Add`{.action} button once the fields are filled in. Your certificate will then appear in the certificate list.
297+
Click the `Add`{.action} button once the fields are filled in. Your certificate will then appear in the certificate list.
295298

296299
![Adding an existing certificate](images/add_certificat_custom.png){.thumbnail}
297300

@@ -303,27 +306,26 @@ Once your certificate(s) are configured, you can create an HTTPS frontend, on th
303306
Optionally, you can also enable the *HSTS* option. If this option is enabled, browsers will record that this website should *never again* be visited without HTTPS after their first visit in HTTPS. This strengthens overall security by protecting against "Man-in-the-middle" attacks in which a malicious actor could make your website appear unavailable in HTTPS and force your visitors to switch to "HTTP".
304307

305308
> [!warning]
306-
>
307309
> Although the added security is significant, it is recommended to wait a while before enabling this option, to make sure there are no side effects in HTTPS. Indeed, once HSTS is enabled, there is no going back.
308310
>
309311
310312
#### From the OVHcloud API
311313

312-
- List the existing SSL/TLS certificates :
314+
- List the existing SSL/TLS certificates:
313315

314316
> [!api]
315317
>
316318
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/ssl
317319
>
318320
319-
- Get the details of an SSL/TLS certificate :
321+
- Get the details of an SSL/TLS certificate:
320322

321323
> [!api]
322324
>
323325
> @api {v1} /ipLoadbalancing GET /ipLoadbalancing/{serviceName}/ssl/{id}
324326
>
325327
326-
- Adding a new existing SSL/TLS certificate :
328+
- Adding a new existing SSL/TLS certificate:
327329

328330
> [!api]
329331
>
@@ -337,7 +339,7 @@ Optionally, you can also enable the *HSTS* option. If this option is enabled, br
337339
> @api {v1} /ipLoadbalancing PUT /ipLoadbalancing/{serviceName}/ssl/{id}
338340
>
339341
340-
- Deleting a specific SSL/TLS certificate :
342+
- Deleting a specific SSL/TLS certificate:
341343

342344
> [!api]
343345
>
@@ -352,7 +354,7 @@ If you have several zones, you will have to apply the same configuration for eac
352354

353355
#### From the OVHcloud Control Panel
354356

355-
Go to the home page of your OVHcloud Load Balancer service and click on the `Apply the configuration`{.action} button.
357+
Go to the home page of your OVHcloud Load Balancer service, click on the `...`{.action} dots next to the name of your service and click on `Apply the configuration`{.action}.
356358

357359
![Apply the configuration](images/btn_apply_configuration.png){.thumbnail}
358360

@@ -362,7 +364,7 @@ Then select the list of zones you want to deploy and click on the `Apply the con
362364

363365
#### From the OVHcloud API
364366

365-
- Refresh a zone :
367+
- Refresh a zone:
366368

367369
> [!api]
368370
>
@@ -375,4 +377,4 @@ Once all these steps are completed, you should have a functional load balancing
375377

376378
## Go further
377379

378-
Join our [community of users](/links/community).
380+
Join our [community of users](/links/community).

0 commit comments

Comments
 (0)