CSS - SSL Stickiness

rajesh.perumalla · ‎03-12-2007

Gilles,

Could you please advice the CSS content configured with stickiness SSL ID and balance method round robin is recommended configuration or not.Are there are any issues with SSL stickiness with the browsers i.e IE .

Note:- I am not using SSL Module in the CSS.

Thanks in advance...

Syed Iftekhar Ahmed · ‎03-13-2007

There are two issues

Some versions of IE (5.0, 5.5 --check http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q265369) will

cause the client to change its SSL ID every 2 minutes and this will break

stickyness with application ssl and advanced balance SSL as this is layer 5

stickyness based on SSL session ID. A sniffer trace from the client will

show the ID field change.

--------------------------

You have to be aware that SSL stickiness will only work with SSL v3,

because it comes with the session ID not encrypted. SSL v2 comes with the session ID encrypted and you can't do stickyness

based on that version.So your appliaction servers must be using SSL v3, if you want to use SSL ID based stickiness.

Hope it helps

Syed Iftekhar Ahmed