Hi,

I wan to cofigure my CSS to advertise VIP addresses through ospf. Everything is fine untill I want to use SSL termination on these VIP addresses. This is because the contents for SSL terminations ares always in "Alive" state. They dont observe the backend services, but the ssl-accel type service, whitch is always up till the SSL module working fine. So the VIP address is advertised whatever is with the backend services.

Cisco TAC told me, the only way to workaround this issue is to write a script, witch is monitors the health of the backend services and "suspend" the ssl-accell service. Of course this is not a good solution, because all the SSL services will droped on the CSS. But I hope, there is a way to write a script to automatic suspend the SSL content rule, or unconfigure the ospf adveritse entry for that VIP.

Did anyone already write such a script on CSS? Or any similar for that. I'm not really a scripting master, thats why I ask for some help!

Thanks!