ACE 4710 SSL server LB with stickiness

mmertens · ‎07-23-2008

I will be replacing 11500 CSS which are not doing SSL termination, just load-balancing SSL sessions terminated on servers with ACE 4710.

On their CSS config, they were doing SSL-sticky. I understand the 4710 doesn't support SSL sticky, but can perform the same function by parsing the HTTP header. Has anyone done this config before and know where/how to parse the header to look for the SSL session# and stick connections to same server?

THANKS!

Syed Iftekhar Ahmed · ‎07-23-2008

In Ace 2.x code GPP (Generic protocol parsing) was introduced that enables ACE to look into the Layer 4 payload.Which is how this stickiness id achieved.

details at

http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A2/configuration/slb/guide/sticky.html#wp1133923

I dont think its currently available on ACE appliance yet.

Syed

mmertens · ‎07-23-2008

Syed,

Unfortunately, V2.X is not available yet on the appliance.

Syed Iftekhar Ahmed · ‎07-23-2008

Thats what I mentioned in my post.

I dont think Ace appliance currently support this.

Syed