CSS - SSL Stickiness

Unanswered Question
Mar 12th, 2007
User Badges:

Gilles,


Could you please advice the CSS content configured with stickiness SSL ID and balance method round robin is recommended configuration or not.Are there are any issues with SSL stickiness with the browsers i.e IE .


Note:- I am not using SSL Module in the CSS.


Thanks in advance...

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Syed Iftekhar Ahmed Tue, 03/13/2007 - 01:23
User Badges:
  • Blue, 1500 points or more


There are two issues


Some versions of IE (5.0, 5.5 --check http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q265369) will

cause the client to change its SSL ID every 2 minutes and this will break

stickyness with application ssl and advanced balance SSL as this is layer 5

stickyness based on SSL session ID. A sniffer trace from the client will

show the ID field change.


--------------------------

You have to be aware that SSL stickiness will only work with SSL v3,

because it comes with the session ID not encrypted. SSL v2 comes with the session ID encrypted and you can't do stickyness

based on that version.So your appliaction servers must be using SSL v3, if you want to use SSL ID based stickiness.


Hope it helps

Syed Iftekhar Ahmed

Actions

This Discussion