Update Load Balancer to HTTPS listener for DiT

podaac / swodlr

swodlr (swaa·dler) is a system for generating on demand raster products from SWOT L2 data

Apache License 2.0

4 stars 2 forks source link

Update Load Balancer to HTTPS listener for DiT #97

Closed viviant100 closed 6 months ago

viviant100 commented 9 months ago

https://wiki.earthdata.nasa.gov/pages/viewpage.action?spaceKey=ENS&title=PI+24.1+Tenant+Action+Items

frankinspace commented 8 months ago

We will need to update the SWODLR load balancer to use HTTPS with a certificate issues by PrivateCA. There are details and a Terraform example shown here: https://wiki.earthdata.nasa.gov/pages/viewpage.action?pageId=335709250#tab-Terraform

nikki-t commented 6 months ago

I clarified the SSL policy and it looks like the recommendation from both AWS and NGAP (under Tenant LoadBalancers) is ELBSecurityPolicy-TLS13-1-2-2021-06.