SSL with Anycast setup

[vhostvn]

Hi,

We get problem with Anycast IP in 3 datacenter, 3 datacenter has the same IP (like 8.8.8.8) and SSL was unable to provision. If we change domain to Unicast IP, then it created SSL cert successful.

So which validation method you are using to validate certs?

[zhyale]

if you are using ACME automatic certificate, simple node is required, multiple nodes are not supported, because the CA will call back to validate the owner of the domain, the domain must be pointed to the gateway.

If you are using multiple nodes, please configure certificate manully with public key and private key.

[vhostvn]

I think that we can do our own research and integrated with DNS-01 validation. This can delegate and allow our DNS auto active CNAME record and accept it. Do you want to join, test and integrate with Janusec?

Something like CloudFlare architectures.