I'm using a HTTPS connection for my webshop to have a secure connection for my users, but now I would like to add Varnish for faster pageloads but which doesn't support SSL.
So the idea to still implement Varnish is this setup:
Well except for User A cause I redirect all users to use the https:// webaddress. So the user connects to the server with a HTTPS connection, Nginx terminates HTTPS so varnish can be used.
But my question: What is a save connection between my Varnish server and my actual Back-end server (the LAMP server in this case, which is a LEMP server in my case)? Cause I was thinking of private networking at Digital Ocean (where my current servers are hosted). But their servers with 4GB of RAM (which I would like to use for Varnish) are quite expensive!
So I was thinking of getting a bit more affordable server with 4GB of RAM somewhere else as my Varnish server, in a different datacenter, and connect to my back-end server at Digital Ocean. But in that case I cannot use private networking. But is this OK or not that safe?
Is it safe to have a non-https connection between my varnish server and back-end server? I suppose it's just OK, but to be sure, I hope someone over here can give me some advice.