Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ASR and SSL

Scenario 1:

Utilizing ASR between CSS's

SSL processing is done on the servers

If the master CSS fails, will the SSL sessions continue to flow through the backup CSS? Will the server be able to continue processing the established flows?

Scenario 2:

Utilizing ASR between CSS's

SSL processing done in CSS with SSL acceleration module

If the master CSS fails, will the SSL sessions continue to flow through the backup CSS? Will the SSL module continue processing the established flows?

Scenario 3:

Utilizing ASR between CSS's

SSL processing done in SCA

If the master CSS fails, will the SSL sessions continue to flow through the backup CSS?

Will the SCA be able to continue processing the established SSL flows?

1 REPLY
Cisco Employee

Re: ASR and SSL

when the SSL offloader is outside of the CSS, for the CSS the connection is just a TCP connection.

So, ASR will work.

If the SSL offloader is the SSL module inside the CSS, then ASR does not work.

With the case of the SCA, if the same set of SCA are reachable from both CSS, it should be able to continue handling the active flows even after CSS failover.

Gilles.

122
Views
0
Helpful
1
Replies
CreatePlease to create content