> > I need both the feature(Client IP and Vulnerability overcome). >
You cannot with the current state of ELBs. One way to fix this is to terminate SSL at nginx with renegotiation disabled in front of haproxy. You will need CNAMEs managed by akamai or a route53 monitor and at least a multi AZ deployment to pull this off correctly. Manas _______________________________________ Pune GNU/Linux Users Group Mailing List