ASR and SSL

[cisco123456]

Scenario 1:

Utilizing ASR between CSS's

SSL processing is done on the servers

If the master CSS fails, will the SSL sessions continue to flow through the backup CSS? Will the server be able to continue processing the established flows?

Scenario 2:

Utilizing ASR between CSS's

SSL processing done in CSS with SSL acceleration module

If the master CSS fails, will the SSL sessions continue to flow through the backup CSS? Will the SSL module continue processing the established flows?

Scenario 3:

Utilizing ASR between CSS's

SSL processing done in SCA

If the master CSS fails, will the SSL sessions continue to flow through the backup CSS?

Will the SCA be able to continue processing the established SSL flows?

[Gilles Dufour]

when the SSL offloader is outside of the CSS, for the CSS the connection is just a TCP connection.

So, ASR will work.

If the SSL offloader is the SSL module inside the CSS, then ASR does not work.

With the case of the SCA, if the same set of SCA are reachable from both CSS, it should be able to continue handling the active flows even after CSS failover.

Gilles.