#Load Balancer options that can support a large amount of certificates/domains

1 messages · Page 1 of 1 (latest)

amber girder
#

Hey guys, I'm working on some refactoring on one of my company's products. Right now it's a basic flow from an Azure standard Load Blanacer to one of the three vms that will render the application. Right now, client's can add their own custom domain and change their dns settings to point to our Azure Load Balancer.
We generate lets encrypt ssl certificates and bind this to each VM. I set-up a proof of concept of moving over to an Application Gateway that does ssl termination there and then routes the request to a new app service. This works well, but I later found out about the 200 listener limit on Gateway. I looked at Front Door, and there's a similar restriction on 500 custom domains.

I played with the idea of just setting up my own vms and installing nginx on those and using that as a load balancer, but it just becomes a mess of work when I also add in certificate management to it. (I'll probably have to do this in combination with certbot if I can't think of anything else). Does anyone know of any Azure service that would be appropriate for ssl termination with certificates added to keyvault?

covert sparrow
#

I have a simila problem. Application load balancer is ridiculously expensive and using a single VM does'n grant you any resilency