Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Sticky session for SSL termination

We have a server farm with 2 servers.  The ACE is perfoming SSL termination to this farm, and talking tcp/80 on the back end.  How can I ensure these sessions are sent to the same servers?

Thanks

1 REPLY
Cisco Employee

Re: Sticky session for SSL termination

since you are doing ssl termination you can do cookie sticky and have the ace either learn a cookie from the server or insert a cookie to provide sticky.

for instance to do cookie insert

sticky http-cookie COOKIE1 GROUP3
cookie insert browser-expire <-- this makes it a session based cookie. If you want the cookie to expire at a set time you can leave off browser-expire 
and then set a timeout . the timeout is not on ace rather we will send a utc expire time to the browser
serverfarm test

then call the sticky serverfarm in your load balance policy

policy-map type loadbalance first-match L7PLBSF_STICKY-COOKIE_POLICY
  class class-default

518
Views
0
Helpful
1
Replies