Traffic flow

Answered Question
Sep 28th, 2007
User Badges:

Is it possible to use CSS as load-balancer for ssl connections but with the certificates instaled on the real server?

Does anyone know of a document where traffic flow across CSS is explained? I have to know wich source IP address arrives to the real server. I guess it is not the IP address of the client machine, however that was my goal since I have to do some statistics on some web accesses.

Thanks,

Jo?o Carvalho

Correct Answer by Syed Iftekhar Ahmed about 9 years 9 months ago

Yes you can.Obviously CSS wont be able to parse layer 7 info (cookie, url,header) but It can load balance it as layer 4 traffic. Simply create a TCP 443 layer 4 content rule and all the https traffic will load balanced.


If you are not using source natting (group commands)then source ip hitting the server will be Client's IP.So it depends how your CSS is configured.


Syed Iftekhar Ahmed


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Syed Iftekhar Ahmed Fri, 09/28/2007 - 22:38
User Badges:
  • Blue, 1500 points or more

Yes you can.Obviously CSS wont be able to parse layer 7 info (cookie, url,header) but It can load balance it as layer 4 traffic. Simply create a TCP 443 layer 4 content rule and all the https traffic will load balanced.


If you are not using source natting (group commands)then source ip hitting the server will be Client's IP.So it depends how your CSS is configured.


Syed Iftekhar Ahmed


jcarvalh Sat, 09/29/2007 - 08:00
User Badges:

Thank you very much.


Best regards,


Joao Carvalho

Actions

This Discussion