Jails and SSL..

[Saint Aardvark the Carpeted]

adp disturbed my sleep to write:
> I want to run Apache under a FreeBSD jail. For normal http this works fine.
> However, I'm a little worried that we won't be able to use jails because we
> use SSL for several sites. With SSL we have to define one IP per site. Jails
> only have one IP. Is there a way around this other than just having one jail
> per SSL site? (I'd rather not do that!)

Something I think I'm going to end up doing is running two jails:  one
for http, one for https.  You can bind jails to local addresses (say,
127.0.0.3), and then use either natd or ipfw to forward different ports
to the appropriate jail.  

HTH,
Hugh

-- 
Saint Aardvark the Carpeted
aardvark at saintaardvarkthecarpeted.com
Because the plural of Anecdote is Myth.