security scores and TLS config

Maxim Konovalov maxim at
Tue Jul 10 15:56:21 UTC 2018

Hi Jay,

On 10/07/2018 15:07, jstephens wrote:
> Hello,
> With some experience in F5 and NetScaler world but still new to Nginx I have
> been tasked with migrating 50+ public URLs to NGINX Plus configured as
> keepalived HA pair.  What would be best SSL configuration to achieve highest
> security scores from Qaulys SSLLabs or BitSight ?  Can someone recommend or
> share current best SSL config ?  
> Alos, as for overall design what is an optimal design in such case ?
> 1.  Single keepalived IP with server_name directives or separate IP for each
> URL ?  If separate IPs, do i have to list them in keepalived config ?
> 2.  Is single SSL config file possible to share the same encryption settings
> across all URLs ?
> Obviously my goal here is to achieve high availability with A+ security
> scores.
I'd suggest to reach nginx-plus support with your inquiry.



Maxim Konovalov

More information about the nginx mailing list