# Kiabana load balancing

**URL:** <https://discuss.elastic.co/t/kiabana-load-balancing/58311>\
**Category:** Kibana\
**Created:** [August 18, 2016, 5:03am UTC](https://discuss.elastic.co/t/kiabana-load-balancing/58311 "2016-08-18T05:03:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\
**Post date:** [August 18, 2016, 5:03am UTC](https://discuss.elastic.co/t/kiabana-load-balancing/58311/1 "2016-08-18T05:03:34Z")

</div>

Hi

We have configured two ELK instances with Shield , marvel plugin. We are using SSL/TLS encryption in this cluster. My both instances of kibana are accessible using their individual URLs e.g. [https://host1:5601](https://host1:5601) I am trying to configure load balancing for kibana instances using apache load balancer but it is not working.  
Is apache load balancer is the correct in this scenario ? If not what other options will be the best to configure kibana load balancing.

Thanks.

---

<div class="post-metadata">

**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\
**Post date:** [August 18, 2016, 11:18pm UTC](https://discuss.elastic.co/t/kiabana-load-balancing/58311/2 "2016-08-18T23:18:12Z")

</div>

Could you share your apache configuration? What exactly isn't working?

---

<div class="post-metadata">

**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\
**Post date:** [August 19, 2016, 6:18am UTC](https://discuss.elastic.co/t/kiabana-load-balancing/58311/3 "2016-08-19T06:18:34Z")

</div>

If I enter IP and hit I get internal server error if I use [https://IP](https://IP) then I get message that , This site can’t provide a secure connection 9.126.112.124 sent an invalid response.

I have added following in httpd.conf

> ProxyRequests Off  
> \<Proxy \*\>  
> Order deny,allow  
> Deny from all

> \<Proxy "balancer://mycluster"\>  
> BalancerMember "[https://irldxvm081.irl.in.ibm.com:5601](https://irldxvm081.irl.in.ibm.com:5601)"  
> BalancerMember "[https://irldxvm074.irl.in.ibm.com:5601](https://irldxvm074.irl.in.ibm.com:5601)"  
> Order allow,deny  
> Allow from all  
>   
> ProxyPass "/" "balancer://mycluster"  
> ProxyPassReverse "/" "balancer://mycluster"

and in ssl.conf

> [root@irldxvm074 conf]# sed -e '/^#/d' /etc/httpd/conf.d/ssl.conf

> LoadModule ssl\_module modules/mod\_ssl.so

> Listen 443

> SSLPassPhraseDialog builtin

> SSLSessionCache shmcb:/var/cache/mod\_ssl/scache(512000)  
> SSLSessionCacheTimeout 300

> SSLMutex default

> SSLRandomSeed startup file:/dev/urandom 256  
> SSLRandomSeed connect builtin

> SSLCryptoDevice builtin

> 

> ServerName [irldxvm074.irl.in.ibm.com](http://irldxvm074.irl.in.ibm.com)  
> ProxyPreserveHost On  
> ProxyRequests off  
> DocumentRoot /var/www

> ErrorLog logs/ssl\_error\_log  
> TransferLog logs/ssl\_access\_log  
> LogLevel warn

> SSLEngine on  
> SSLProxyEngine On  
> SSLCertificateFile /opt/apachecerts/cert.crt  
> SSLCertificateKeyFile /opt/apachecerts/irldxvm074.key  
> SSLVerifyClient require  
> SSLVerifyDepth 1  
> SSLCACertificateFile /opt/apachecerts/certnew.pem

> \<Proxy balancer://mycluster\>  
> BalancerMember [https://irldxvm081.irl.in.ibm.com:5601](https://irldxvm081.irl.in.ibm.com:5601)  
> BalancerMember [https://irldxvm074.irl.in.ibm.com:5601](https://irldxvm074.irl.in.ibm.com:5601)  
> # technically we aren't blocking anyone, but could here  
> Order Deny,Allow  
> Deny from none  
> Allow from all  
> # Load Balancer Settings  
> # A simple Round Robin load balancer.  
> ProxySet lbmethod=byrequests

---

<div class="post-metadata">

**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\
**Post date:** [September 2, 2016, 11:56am UTC](https://discuss.elastic.co/t/kiabana-load-balancing/58311/4 "2016-09-02T11:56:40Z")

</div>

Hi ,

Did you get chance to look into this ?

One other query -  
If I have only 1 ELK server with shield , SSL/TLS encryption on, is it possible to configure apache reverse proxy to [https://elkserver:5601](https://elkserver:5601)  
I have tried to configure this but it is not working and not redirecting to 5601 port

Regards,  
Vinod

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:39pm UTC](https://discuss.elastic.co/t/kiabana-load-balancing/58311/5 "2017-07-06T13:39:39Z")

</div>