[web-devel] Try AWS ELBs - even if you don't need the load balancing (was Re: [Yesod] Initial SSL support for Warp
mxcantor at gmail.com
Sun Oct 23 11:20:31 CEST 2011
About load balancing, I strongly recommend that AWS EC2 deployments use the amazon ELBs. even if you don't need a load balancer (and their load balancing capabilities are really awesome) they provide a very well testing, incredibly simple to set up SSL endpoint.
On Oct 23, 2011, at 4:02 AM, Michael Snoyman wrote:
> Hi all,
> Thanks (once again) to Vincent's awesome tls package, I've just added
> experimental support to Warp for SSL connections. The basic idea is to
> create an abstraction within Warp called a Connection, which handles
> sending and receiving data. This abstraction provides for vectored and
> non-vectored I/O, as well as enumerator-based I/O. In other words, it
> supports all of the features Warp already uses. Then a separate
> package, warp-tls, provides an alternate way of creating a Connection
> that uses the tls package instead of a raw socket.
> I've put this code up in a separate branch. The one piece of the
> puzzle most definitely not implemented yet is proper timeout support.
> I'm waiting till Kazu and I come up with some clarity on the recent
> slowloris discussion before implementing the timeout code for tls.
> Also, I'm sure some thing could be more efficient, but it's certainly
> I've included a pong.hs demo, as well as a self-signed private key and
> certificate, so in order to test this out, you should need to:
> 1. Clone the repo
> 2. "cabal install" warp
> 3. "runghc pong.hs" inside the warp-tls package
> Another change that likely makes sense is to improve the TLSSettings
> setup so it doesn't need to read the key and certificate from a file.
> I'm definitely open to other suggestions. Also, I don't have a
> particular use case for this right now, it was just something sitting
> on my TODO list and was relatively easy to implement, so I decided to
> take a crack at it.
>  https://github.com/yesodweb/wai/tree/warp-tls
More information about the web-devel