Prevent X-Forwarded-For Spoofing or Manipulation

When using an inline proxy like our Cloud Load Balancer or Web Application Firewall, you’ll often want to know the original client IP address for security, to track in your logs for stats or for other reasons. In some of our other KB articles, we’ve already discussed how to enable and capture this information using […]

Read More

SSL Error: Could not create certificate-key pair

If you’re attempting to create a certificate key-pair and have received the message shown below, there is usually one common remedy: The remedy is to run your key through OpenSSL using the RSA key processing tool to change it to the traditional SSLeay compatible format. And yes, to immediately answer our critics: we do support […]

Read More

Manual failover in the Cloud Load Balancer

A question we frequently receive is: “How can I manually fail traffic over from my primary server to my failover server group in the Cloud Load Balancer?” Manually failing traffic is something you may wish to do if your primary server is experiencing issues that the monitor has not yet detected, or if you want […]

Read More

Creating Servers/Devices using a FQDN

In the version 3.10 release of our cloud platform, we introduced support for creating back-end devices (servers) using a Fully Qualified Domain Name (FQDN) instead of an IP address. While it is always best to use an IP address instead of a domain name, there are some instances where a FQDN is the only option, […]

Read More

CLB Overflow Feature Configuration

In our v3.10 release, we introduced a new Cloud Load Balancer feature called Overflow. This feature is designed to send traffic from your active server group to your failover server group when a certain connection threshold has been reached. This threshold can be configured globally to count connections being distributed to all of your servers, […]

Read More

Implement an HTTP to HTTPS redirect

If you’re looking to implement an HTTP to HTTPS (SSL) redirect for your web application, you can now enable a feature directly on the load balancer instead of configuring it on your server. This significantly improves redirect performance and reduces the load on your servers. To implement this change, you must be on the main […]

Read More

How to block specific countries from reaching your website or application

Total Uptime’s Cloud Load Balancer and Web Application Firewall support a feature to block entire countries from reaching  your website or application on a per-port basis. This is a powerful tool to stop unwanted traffic from getting anywhere near your servers or devices. When enabled, traffic that reaches our network will have the origin IP […]

Read More

How can I disable TLS 1.0 to comply with PCI?

PCI requires that TLSv1.0 be disabled. If you’re using the SSL protocol on our load balancer to take advantage of SSL Offload and/or SSL Acceleration, you can easily disable TLS 1.0. You don’t necessarily need to disable this on your server, since communication between the load balancer and your devices is a trusted connection, but […]

Read More

How can I link my SSL cert to an Intermediate chain?

We don’t support uploading certificate chains, Intermediate certificates or Root certificates to avoid duplication and save space on our load balancers. But we do have most of the common Intermediate chains already in our repository for your use. You can link/chain your existing SSL certificate to one of these Intermediates to ensure they are trusted […]

Read More

A Comprehensive Guide on Supported Protocols

The Total Uptime Cloud Platform supports a variety of different protocols for use with the Cloud Load Balancer, Web Application Firewall and other networking solutions. These protocols were created to support additional features and functionality, usually at Layer 7, way beyond the standard TCP and UDP protocols also offered. Before you add a port/protocol combination, […]

Read More