Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CSS and ACE appliance SSL TPS


Can someone explain how are SSL Transactions per second calculated on CSS and ACE?

We need to select appropriate SSL license needed for future ACE appliance, wich is defined in terms of TPS.

We also currently have CSS device with SSL module. Is there any way to find current SSL TPS info on a CSS device?

Thank you and regards,


Cisco Employee

Re: CSS and ACE appliance SSL TPS

New Member

Re: CSS and ACE appliance SSL TPS

Hi Gilles, :)

Thanks, I know that is a maximum number for one SSL module in CSS, but it does not help to estimate if we need SSL 1,000 TPS License or SSL 5,000 TPS License for ACE 4710.

Can you or someone else explain what exactly is counted as 1 Transaction in SSL and how should we estimate needed number of TPS for ACE?

An idea was to use CSS to find some current statistics, but if you have any better suggestion, it is welcomed. :)

Best regards,


Re: CSS and ACE appliance SSL TPS

TPS tells you how many NEW SSL sessions can be setup by ACE per second. if you are using 1000 TPS license, and the ACE

receives more than 1000 new connection attempts in one second then these new connections will be dropped.

"Show resource usage" on ACE can give the consumed amount

ACE-4710/Admin# show resource usage | incl ssl-conn

Resource Current Peak Min Max


ssl-connections rate 0 0 0 1000

On CSS "show SSL flows" can give you the

current number of open SSL connections.

Another important SSL number is "Concurrent SSL Sessions supported" . ACE appliance supports 100K concurrent SSL sessions whereas CSS 11501 supports 40K.


Syed Iftekhar Ahmed

New Member

Re: CSS and ACE appliance SSL TPS

Thank you,

This clears things a bit... :)



New Member

Re: CSS and ACE appliance SSL TPS

What is the method used to calculate SSL TPS requirement.

Current: Peak SSL Transactions  6,000

If I expect a peak concurrent connection of 200,000 what would be the methodology for calculating SSL TPS needs. (Some sample calculation steps would be appreciated.)

Can I interpret the licensing as follows,

SSL TPS: SSL Transactions per second: Number of NEW transactions that can be setup by ACE per second. (Does this mean established SSL transactions are not counted by the license, though each of the packets in established transactions require SSL termination!)



New Member

Re: CSS and ACE appliance SSL TPS

empty message