How to Handle 1,000's of SSL Certificates

0

Our platform is a multi-tenant content management system with thousands of customers. They all have their own domains and require SSL Certificates. We increased our quota limits to 100 certificates per ALB and 50 entries per certificate. This means we can get 5,000 entries or 2,500 domains (since we need 2 entries per domain - domain + wildcard for www). This is great, but we're expecting to onboard 10,000, 20,000, maybe 50,000+ new customers/domains over the next 6-12 months. What is the best solution for handling this? We could add a new ALB every time we max out our SSL limits, but is there a better solution? Thanks!

質問済み 1年前241ビュー
2回答
0

Putting the SA hat on here... Whats the requirement and reason for them to have their own domain?

Have you thought about a different way to deliver the solution so that this overhead isnt needed?

profile picture
エキスパート
回答済み 1年前
  • They are hosting their business websites. Very similar to Wix, Squarespace, etc. Custom domains with SSL Certs are essential.

  • I see now your issue. Someone else may have a better idea however apart from multiple ALB and certificates, the option that springs to mind is to use something like a F5 ltm virtual appliance for the ssl alb. I’m not sure of the limitations of the number of certificates here though.

0

Take a look at Nginx. You'd switch from a ALB to NLB pointed to that tier, and it can be configured with an unlimited number of certificates. After it handles SSL it'd forward the request on to your application tier for processing.

profile picture
回答済み 1年前
  • Cool. I'll definitely look into this. Looks like we can provision Let's Encrypt SSL Certs too.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ