CSS11506 Reverse Proxy

Unanswered Question

Hi, I have a need to terminate 2 SSL connections on our CSS11506. The backend web connections are http 80. In order for this to work do the web servers need to be connected to the CSS switch ports or can I have then located on another segment (seperate switch) and simply have the CSS redirect to them via in place routing.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jon Marshall Fri, 05/11/2007 - 08:53
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Hi Dave

You don't have ti directly attach the servers to the CSS. They can be located on another switch in the same vlan or another switch in a different vlan.



Thanks Jon, for some reason when I move the servers off the CSS module and onto the same segment but different switch I can no longer make the connection.

The other problem I noticed after sniffing the traffic is that the client arps to the CSS VIP for the HTTPS connection, then makes the HTTP connetion directly to the backend server. Which is not what I want, I need the CSS to be handling all of the communication to the backend web servers.

Any thoughts

tprendergast Wed, 06/13/2007 - 13:16
User Badges:
  • Silver, 250 points or more

Are your real servers setup to use the CSS as their default gateway?


This Discussion