topic CSS+SSL Failover in Application Networking

CSS+SSL Failover

conoufri — Tue, 05 Apr 2005 21:21:57 GMT

If I have two CSS with SSL module in an ASR config, in case the master CSS fails, will the redundant CSS chassis take over the SSL sessions as well, without the client having to reconnect?

Thx,

Christos

Re: CSS+SSL Failover

Gilles Dufour — Wed, 06 Apr 2005 06:36:00 GMT

no. We are currently working on such a solution but this is not possible as of now.

Gilles.

Re: CSS+SSL Failover

conoufri — Wed, 06 Apr 2005 08:41:18 GMT

Gilles hi,

Thx for your reply.

What I couldn't find on the web was info on SSL fail-over and how the SSL will behave in the event that the Master CSS fails and the Stand-by takes over. What will happen to the SSL sessions.

Also, how does the CSS behave in the event that it looses one of the back-end web-servers?

If you want you can contact me direct at:

conoufriou@odysseyconsultants.com

Regards,

Christos

Re: CSS+SSL Failover

Gilles Dufour — Wed, 06 Apr 2005 09:45:46 GMT

we can save TCP connections but not the ssl info.

So after failover, the traffic will be sent to the new active SSL module which will send a RESET to the client.

The client will normally restart the connection.

If you lose the backend server, the CSS does nothing.

If the client is sending traffic, the SSL module will forward it to the dead server and if we don't get a response during the timeout period the SSL module will reset the connection.

If a new connection is open it will be sent to another active server if one is available.

Regards,

Gilles.