OneConnect and Proxy/Squid Load Balancing

You could balance based on destination domain...

 

 

Compute a hash on the destination domain. Send to that poolmember. With SSL via a proxy, you have access to the host because the SSL is negotiated between the client and the endpoint. The proxy gets to see the initial connection and request as a CONNECT method. The parameters to the connect include the host and port.

 

 

That would help your caching too. Because each proxy would have a unique set of hosts that it was caching for. Hit rates would go up... (We used to do something like this using netscape proxies, but the hashing was done in a PAC file using javascript).

 

 

H