Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-8291

Allow SSL and Non SSL Ports

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Labels:
      None

      Description

      Currently the SSL functionality is an all or nothing approach. I would like the ability to have a second set of ports configured which were secured via SSL and leave the standard ones unencrypted. In the same way the web servers use port 80 and 443 by default.

      That would give the client the opportunity to choose if they wanted to use SSL or not. By using different ports its would also give network admins control over this. e.g. forcing external users to use SSL.

      The most obvious use case: having a primary data centre and a disaster recovery data centre. You want the external connections to take place over SSL and the internal ones can safely avoid the overhead. You can use the firewall to prevent external access to the unencrypted ports.

      Another use case: Allowing external admin users secure access whilst allowing the primary application running in the same DC to avoid the performance overhead of SSL.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              charliem Charlie Mason
              Participants:
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: