Object Storage - Enabling HTTPS on a static website using a custom domain

From the OVHcloud Control Panel, navigate to the Load Balancer section via the Network menu.

Choose the SSL certificates tab, then click Add an SSL certificate.

On the next screen, fill in the fields and click Add.

You now need to configure a server cluster and add it to your Load Balancer. A server cluster is a pool of backend machines that will handle the workload.

Still from the Load Balancer section of the OVHcloud Control Panel, click the Server clusters tab, then click Add a server cluster.

Enter the configuration of the new server cluster...

• Name (optional)
• Protocol: HTTP
• Port: 80
• Datacenter: Choose the region in which you have hosted your website

...and click Add.

You now need to add servers to your server cluster. Click the Add a server button.

Enter the configuration information of your server:

• Name (optional)
• IPv4 address: Enter the public IP associated with your static website default URL in the form of {bucket}.s3-website.{region}.io.cloud.ovh.us

You can retrieve this IP address by doing a dig command on the URL.

Example: using dig command

lxxxx@LWI1XXXXXX:~$ dig my-site.s3-website.us-east-va.io.cloud.ovh.us

; <<>> DiG 9.16.1-Ubuntu <<>> my-site.s3-website.us-east-va.io.cloud.ovh.us
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22041
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;my-site.s3-website.us-east-va.io.cloud.ovh.us. IN A

;; ANSWER SECTION:
my-site.s3-website.us-east-va.io.cloud.ovh.us. 3600 IN A 141.95.161.77

;; Query time: 12 msec
;; SERVER: 10.15.25.129#53(10.15.25.129)
;; WHEN: Mon Jun 05 16:09:56 CEST 2023
;; MSG SIZE  rcvd: 84

Example: using host command

lxxxx@LWI1XXXXXX:~$ host my-site.s3-website.us-east-va.io.cloud.ovh.us
my-site.s3-website.us-east-va.io.cloud.ovh.us has address 141.95.161.77

The next steps consist of adding front-ends to your Load Balancer. A front-end will be the internet-facing element of your Load Balancer and is responsible for handling and routing incoming requests.

In the Load Balancer section of the OVHcloud Control Panel, click the Front-ends tab, then click Add a front-end.

Add two frontends:

• One frontend whose sole purpose is to handle all incoming HTTP requests and redirect them to your domain name in HTTPS
  • name (optional)
  • protocol: HTTP
  • port: 80
  • datacenter: all
  • default server cluster: none
  • advanced settings > HTTP Redirection: https://<your_domain_name>
• One frontend that will handle all incoming HTTPS requests and perform the role of the SSL gateway
  • name (optional)
  • protocol: HTTPS
  • port: 443
  • datacenter: the region where your bucket sits
  • default server cluster: the server cluster previously created
  • certificate: the certificate that you created
  • advanced settings > HTTP Header: Host <default_website_url> in the form <bucket>.s3-website.<region>.io.cloud.ovh.us

Once you have created and configured all the resources, do not forget to click the Apply configuration button to apply all the changes to the Load Balancer.