An HTTPS listener forwards requests over encrypted connections. Create an HTTPS listener to protect sensitive data in transit, such as user information or identity information.
Prerequisites
An ELB instance is created. For more information, see Create an ELB instance.
A server certificate is uploaded to Certificate Management Service. You can use an existing certificate from Certificate Management Service, or upload a third-party server certificate and its CA certificate. For more information about Certificate Management Service, see Certificate Management Service.
Procedure
Log on to the ENS console.
On the ELB Instance management page, find the target instance, and then click Listener Configuration in the Actions column.
On the Listener tab, click Add Listener.
Configure the basic information.
Listener configuration Description Listener Name A custom name for the listener. Select a load balancing protocol Select HTTPS. Listening Port The listening port that receives requests and forwards them to backend servers. Valid values: 1 to 65535. Port 443 is recommended for the HTTPS protocol. Advanced Settings Click to expand or collapse additional listener settings. Click Modify to expand the advanced settings. Scheduling Algorithm Weighted Round-Robin (WRR): A backend server with a higher weight is polled at a higher probability. - Weighted Least Connections (WLC): In addition to polling backend servers based on their weights, this algorithm also considers the actual load (number of connections) of each backend server. If backend servers have the same weight, a server with fewer current connections is polled at a higher probability. - Round-Robin (RR): External requests are distributed to backend servers in sequence based on the order in which the requests arrive.
Idle Connection Timeout Period The maximum time to wait for a request. If no request is received within the timeout period, the current connection is closed. A new connection is established when the next request arrives. Connection Request Timeout Period The maximum time to wait for a response from the backend server. If the backend server does not respond within the timeout period, load balancing returns HTTP error code 504 to the client. Obtain Client IP Address Backend servers can obtain the originating IP address of the visitor. This feature is enabled by default. Click Next and configure health checks. Make sure that the server certificate specified in the Prerequisites section is selected. For more information about the health check parameters, see Configure health checks.
After you configure health checks, click Next. Confirm that the configuration information is correct, and then click Create.
On the Listener tab, find the newly created listener and click Enable in the Actions column to start the listener.