cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
290
Views
5
Helpful
1
Replies

CSS11506 - SSL termination

dclee
Level 1
Level 1

So still terminating 2 ssl websites on CSS, with http connections to the backend servers. Do I need to also add an http content rule for the CSS to backend server connections in addition to the SSL content rule ?

1 Reply 1

Gilles Dufour
Cisco Employee
Cisco Employee

if you want to loadbalance on the backend side, you need an http content rule to catch the decrypted traffic from the internal ssl module.

So, when configuring the ssl cipher, you have to specify the ip and port where to send the decrypted traffic. This can be the server ip directly or it can also be a content rule on the CSS.

If you specific a vip:port you can then apply normal content rule features like loadbalancing but also cookie styckiness, ...

This is the recommended solution.

Gilles.