Search code examples
azuresslazure-cloud-servicesazure-traffic-manager

How to configure SSL on cloud service with traffic manager?


I have a traffic manager pointing to a cloud service. Now I want to configure SSL on that system. How can I configure SSL on a cloud service with traffic manager?


Solution

  • You do that exactly the same way you would do it if no traffic manager was in place.

    That is, you specify which certificate to use for your endpoint in your .cscfg file and upload that certificate to your service.

    The fact that the service sits behind a traffic manager makes no difference because of the use of DNS CNAME records.

    For example, say you want to use SSL with a DNS domain name called mydomain.com, you could have a CNAME record for www.mydomain.com point to mydomain.trafficmanager.net. mydomain.trafficmanager.net would in turn do its traffic management to point to mydomain-east-us.trafficmanager.net, mydomain-west-us.trafficmanager.net, or whichever other instances of your service you specified based on the traffic management rule you selected.

    In this example, the SSL certificate you would provide to your service would be for *.mydomain.com.

    Transparently, requests to www.mydomain.com would be DNS-translated as such:

    www.mydomain.com ->
    mydomain.trafficmanager.net ->
    mydomain-[instance].trafficmanager.net