topic Re: Using SSL Module to Encrypt HTTP post to external Server in Application Networking

Using SSL Module to Encrypt HTTP post to external Server

cnohrden — Wed, 25 Aug 2004 20:01:40 GMT

I would like to know if it's possible for a CSM with its SSL module to receive an HTTP POST from our internal web servers, encrypt that POST w/ SSL, and finally to forward the newly created SSL transmission to a remote external SSL server? If it is possible, is this good practice or is it better to let the web server do the encryption?

Re: Using SSL Module to Encrypt HTTP post to external Server

Gilles Dufour — Thu, 26 Aug 2004 08:51:59 GMT

this is possible.

It is good practice if you do not want to overload your server with the heavy task of encryption/decryption.

If your server is very powerfull and far from being used to its maximum capacity, you can do it on the server.

Another advantage of using an SSL module is that the CSM will see your request in clear text and can therefore perform so *smart* loadbalancing before it gets encrypted by the SSL module.

[ie: cookie stickyness, url hashing, ...]

Regards,

Gilles.

Re: Using SSL Module to Encrypt HTTP post to external Server

cnohrden — Thu, 26 Aug 2004 18:30:36 GMT

This sounds like it may be worth pursuing.

Are there any examples of how this would be configured on the 6500 CSM and SSL Modules?

Thank you.

Re: Using SSL Module to Encrypt HTTP post to external Server

Gilles Dufour — Fri, 27 Aug 2004 06:01:13 GMT

here is a sample config

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a0080216c16.shtml

Gilles.