Brian W Posted February 13, 2009 Share Posted February 13, 2009 I'm not very familiar with the terms used or the way things are done when it comes to networking... so here are my needs and my problem. What we have is: *2 static IPs from our ISP (Cox) *2 SSL sites on the same MS2008 Server with IIS7 (only 1 works) *Motorola Surfboard Modem *Cisco WRT160N Router (looking to upgrade, further details below) *and a 24 port Switch What we need is to get the SSL sites both working at the same time. We are looking at adding more SSL sites down the line but not sure how many. My understanding is that foreach SSL Cert we need a unique public IP. Like I said, we already have 2 IPs. What I need to know is what do I need for hardware to rout those two public IPs into different internal IPs. From there, I think I can handle it, but can't seem to find out exactly what kind of router I need or other solution to get the public IPs to their own internals. Any advice is appreciated. Quote Link to comment Share on other sites More sharing options...
Daniel0 Posted February 13, 2009 Share Posted February 13, 2009 With Apache's mod_ssl it's possible to have multiple domains use distinctive certificates using a single IP address. Quote Link to comment Share on other sites More sharing options...
Brian W Posted February 13, 2009 Author Share Posted February 13, 2009 No Apache server here and nor do we plan on getting one. But thank you for the possible solution. Quote Link to comment Share on other sites More sharing options...
Daniel0 Posted February 13, 2009 Share Posted February 13, 2009 It's not a viable solution anyway. My post was more like an FYI. It may or may not be supported by IIS7, I don't know. The technology that makes it possible, SNI (server name identification), is only supported on Vista's IE7 and above (i.e. not in XP's IE7). Again, it's a Microsoft product that is hindering progression. Quote Link to comment Share on other sites More sharing options...
corbin Posted February 14, 2009 Share Posted February 14, 2009 IIS7 is different on XP and Vista? That's weird. Quote Link to comment Share on other sites More sharing options...
Brian W Posted February 14, 2009 Author Share Posted February 14, 2009 LOL, no, IE(internet explore) not IIS. Quote Link to comment Share on other sites More sharing options...
corbin Posted February 14, 2009 Share Posted February 14, 2009 Ahhh, misread that as IIS7. Still weird that IE7 is different on Vista/XP. Quote Link to comment Share on other sites More sharing options...
steviewdr Posted February 16, 2009 Share Posted February 16, 2009 With Apache's mod_ssl it's possible to have multiple domains use distinctive certificates using a single IP address. Really? If you had an example config/link, I would be most grateful. Thanks, -steve Quote Link to comment Share on other sites More sharing options...
Daniel0 Posted February 16, 2009 Share Posted February 16, 2009 Sure, here you go: http://en.gentoo-wiki.com/wiki/Apache2/SSL_and_Name_Based_Virtual_Hosts Server Name Indication (SNI) is defined in RFC 4366, section 3.1. Unfortunately, the fact that the majority of Internet Explorer deployments don't support it makes it practically impossible to use in a production environment. Quote Link to comment Share on other sites More sharing options...
corbin Posted February 16, 2009 Share Posted February 16, 2009 Internet Explorer strikes again! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.