Server Name Indication (SNI) is used to improve server and client SSL/TLS. It mainly solves the problem that a server can only use one certificate. Supporting SNI means that the server supports binding multiple certificates. When the client uses SNI, it needs to specify the domain name to connect to before establishing an SSL/TLS connection with the server. The server will return a suitable certificate based on this domain name.
Application Scenario
Converge Cloud The layer-7 HTTPS listener of CLB supports SNI, that is, it supports binding multiple certificates. Different domain names in the listening rules can use different certificates. For example, in the same CLB HTTPS:443 listener, *.test.com uses certificate 1 to forward requests from this domain name to a group of servers; *.example.com uses certificate 2 to forward requests from this domain name to another set of servers.
Prerequisites
CLB instance has been created.
Directions
- Log in to the CLB console.
- See Configure HTTPS listener directions to configure the listener and enable SNI when configuring the HTTPS listener.
- When adding forwarding rules in the listener, configure different server certificates for different domain names, click Next, and continue to complete the configuration of health check and session persistence.