auto-ssl / auto-ssl/lua-resty-auto-ssl

Is it possible to point 2 instances of openresty to the same redis instance and share certs?

Open
#257 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Lua
Stars
2k
Forks
184
PR merge metrics
No merged PRs in 30d

Description

Hi

I would like to know if it is possible to share certs using the redis adapter by pointing 2 instances of openresty to the same redis.

My current situation is that I have 2 points of ingress both with openresty, and all the domains have double A records to both these instances. Using the file based certs do not work when you have double A records as often lets encrypt will select the wrong A record to do the challenge with, and go to the wrong openresty which of course is not expecting a challenge and fail, and this quickly hits rate limits.

Is there a reason that two instances cannot share certs via redis?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start from the Redis adapter and the certificate-sharing behavior described in the issue. Test whether two OpenResty ingress instances can point to the same Redis instance while handling the same domains and ACME challenges. Done means establishing whether shared certificates are supported and documenting any required configuration or limitation.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua, nginx, redis
Domain
backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.