auto-ssl / auto-ssl/lua-resty-auto-ssl
Is it possible to point 2 instances of openresty to the same redis instance and share certs?
- Dominant language
- Lua
- Stars
- 2k
- Forks
- 184
- PR merge metrics
- No merged PRs in 30d
Description
Hi
I would like to know if it is possible to share certs using the redis adapter by pointing 2 instances of openresty to the same redis.
My current situation is that I have 2 points of ingress both with openresty, and all the domains have double A records to both these instances. Using the file based certs do not work when you have double A records as often lets encrypt will select the wrong A record to do the challenge with, and go to the wrong openresty which of course is not expecting a challenge and fail, and this quickly hits rate limits.
Is there a reason that two instances cannot share certs via redis?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start from the Redis adapter and the certificate-sharing behavior described in the issue. Test whether two OpenResty ingress instances can point to the same Redis instance while handling the same domains and ACME challenges. Done means establishing whether shared certificates are supported and documenting any required configuration or limitation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- lua, nginx, redis
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100