Hacker News new | ask | show | jobs
by waqas- 3453 days ago
im talking about when microservices expose apis consumed via ajax. then https-http connections dont work.
1 comments
nugator 3453 days ago
As the parent suggested I would terminate the HTTPS connection in an Nginx in front of all your microservices. No microservice needs to handle HTTPS then.
link
dx034 3453 days ago
I thought it was recommended to use https between microservices for all communication? Otherwise the user might think their data is encrypted even though it travels plain-text through networks after the first server, as not all services will run in a separated network.
link
MichaelGG 3453 days ago
That's entirely up to the app. With Cloudflare it's not even normal for HTTPS to mean your data got to the server encrypted.

And anyways you can solve it in the same way: nginx LBs to terminate SSL internally.

link
adaml_623 3453 days ago
Maybe it's such a large publisher that they need separate Nginx instances in front of each of the micro-services.
link
philplckthun 3453 days ago
That goes against the basics of load balancing... And it shouldn't even be an issue to have multiple Nginx instances with similar HTTPS configs.
link