I can see that ssl offloading using haproxy is listed in the Neutron/LbaaS pages but cant decide if this is actually implemented in Havanna or in Icehouse. This is a key requirement as I was considering moving to a hardware loadbalancer solution, but am presently using haproxy with stunnel and keepalive in our present Xen based virtual solution. This is messy and we have performance issues, but likely to be the existing hardware rather than the haproxy setup as we do not have a massive loading - about 150 concurrent users accessing three tomcat servers via this method.

So... Is Openstack Neutron LbaaS SSL offloading viable, assuming it is available to use now? Does anyone use this setup in production systems? Does anyone use other hardware or software options for SSL offloading?

Regards Ian