search

mozilla-services / autograph

Mozilla's digital signature service
https://hub.docker.com/r/mozilla/autograph/
Mozilla Public License 2.0
152 stars 34 forks source link

TCP listener for NLB heartbeats #459

Open jvehent opened 4 years ago

jvehent commented 4 years ago

Expose a TCP listener that follows the HTTP heartbeat and fails when autograph is unhealthy, so that TCP load balancers like AWS NLB.

jvehent commented 4 years ago

@Micheletto What's the spec for the tcp listener? does it just need to negotiate a SYN/SYNACK/ACK, or is the NLB expecting a specific payload too?

jvehent commented 4 years ago

ah! A TCP health check succeeds if the TCP connection succeeds. https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-healthchecks.html

jvehent commented 4 years ago

We're pausing on this until @Micheletto has had a chance to test out the SSL NLB.