From 24dd94f11413f2b4721df2d6ef6ede91164aa616 Mon Sep 17 00:00:00 2001 From: Joao Fernandes Date: Tue, 18 Oct 2016 11:17:00 -0700 Subject: [PATCH] Update DDC load balancer requirements --- docker-trusted-registry/high-availability/index.md | 2 +- ucp/high-availability/set-up-high-availability.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docker-trusted-registry/high-availability/index.md b/docker-trusted-registry/high-availability/index.md index 214772779b..b254879649 100644 --- a/docker-trusted-registry/high-availability/index.md +++ b/docker-trusted-registry/high-availability/index.md @@ -82,7 +82,7 @@ or cloud-based load balancer to balance requests across multiple DTR replicas. Make sure you configure your load balancer to: * Load-balance TCP traffic on ports 80 and 443, -* Not terminate HTTPS connections, +* Use a TCP load balancer that doesn't terminate HTTPS connections, * Use the `/load_balancer_status` endpoint on each DTR replica, to check if the replica is healthy and if it should remain on the load balancing pool or not. diff --git a/ucp/high-availability/set-up-high-availability.md b/ucp/high-availability/set-up-high-availability.md index 612760b63c..11ca4ef5af 100644 --- a/ucp/high-availability/set-up-high-availability.md +++ b/ucp/high-availability/set-up-high-availability.md @@ -55,7 +55,7 @@ replicas. When configuring UCP for high-availability, you need to ensure the CAs running on each UCP controller node are interchangeable. This is done by transferring -root certificates and keys for the CAs to each controller node on the cluster. +root certificates and keys for the CAs to each controller node on the cluster. [Learn how to replicate CAs for high availability](replicate-cas.md) ## Load-balancing on UCP @@ -67,7 +67,7 @@ load-balancer to balance user requests across all controller replicas. Since Docker UCP uses mutual TLS, make sure you configure your load balancer to: * Load-balance TCP traffic on ports 80 and 443, -* Not terminate HTTPS connections, +* Use a TCP load balancer that doesn't terminate HTTPS connections, * Use the `/_ping` endpoint on each UCP controller, to check if the controller is healthy and if it should remain on the load balancing pool or not.