SSL trouble

henry.saravia · ‎02-17-2010

I have a CSS11501 with a SSL module, it is balancing two oracle AS, but if I try to access the application via http i can get a file (like a report) quickly but if I try to access via https the transfer of the file are very slowly. The app is interacting with a data base in another segment of the network. Do you have any idea about this issue?

I attach the config. Is a one arm config and the server have ip default a external router.

jason.espino · ‎02-17-2010

Hello Henry,

There's a couple of things you can try or look at. 1st if you like you can disable the ssl-queue-delay within the proxy-list for the VIP you are experiencing content delivery issues with. By default the CSS will wait 200 milliseconds before emptying the data from the queue and encrypt it to the client. Setting the value to 0 will disable the queuing of data which allows the CSS to immediately encrypt the data as soon as it is received from the backend-server and send it to the client. You can try this and see if the transmission of the HTTPS data is faster.

ssl-server 1 ssl-queue-delay 0

Also, when accessing the content via HTTPS is any of the content or URLs requested to deliver the content in HTTP? You can verify this through capturing your HTTP header information.

Another thing, when accessing the content through HTTPS do you experience any timeouts or content does not get displayed?

- Jason Espino

henry.saravia · ‎02-18-2010

Hi Jason

I apply the command "ssl-server 1 ssl-queue-delay 0", the transfer is better but in http is faster yet.

When access the content via HTTPS, I do not experience any timeouts, the content is displayed normally like http, only in the transfer is the issue.

I dont undrestand this question, could you explain? "Also, when accessing the content via HTTPS is any of the content or URLs requested to deliver the content in HTTP? You can verify this through capturing your HTTP header information"