topic Re: Backend SSL and http keepalives in Application Networking

Backend SSL and http keepalives

dennis-hess — Fri, 02 Sep 2005 17:11:21 GMT

I know it's not possible to do ssl keepalives but I have the need to do more than port keepalives on a ssl web site due to the page failing at times. I'm about to implement back-end ssl with an ssl module and I'd like to make a keepalive to a html page. Can I just put a http keepalive on the backend service? I checked the config guides and CCO and I couldn't find guidance as to whether this would work. Thanks DH

Re: Backend SSL and http keepalives

casablancag — Fri, 02 Sep 2005 18:14:35 GMT

from my point of view, it is possible to do an ssl keepalive with version 7.5. I've tested it and it works fine.

Re: Backend SSL and http keepalives

dennis-hess — Fri, 02 Sep 2005 20:36:04 GMT

We're still running 7.3. I'll look at 7.5 and consider upgrading but I'm still curious about the original question. Also, I shouldn't have said ssl keepalives but rather https page keepalives. I need to check more than the port to ensure functionality. Thanks

Re: Backend SSL and http keepalives

casablancag — Sat, 03 Sep 2005 05:07:46 GMT

Yes i made an encripted http get. It works fine

Re: Backend SSL and http keepalives

Gilles Dufour — Sat, 03 Sep 2005 08:16:16 GMT

You can't do HTTPS keepalive unless you have 7.50.

If you don't have 7.50, all you can is check the first step of the SSL negotiation.

Regards,

Gilles.

Re: Backend SSL and http keepalives

dennis-hess — Sun, 04 Sep 2005 16:49:39 GMT

Thanks Gilles,

I'll investigate upgrading to 7.50. How about the original question? I guess you're saying that is it not possible with pre 7.50 code to configure http keepalives on the backend service. In other words, the CSS will do a http keepalive which the ssl module then encrypts with ssl and sends to the back end server?

Thanks

Re: Backend SSL and http keepalives

dennis-hess — Sun, 04 Sep 2005 17:01:58 GMT

Ah ok... thanks casablanca, I was wondering about that. Normally I'd just try it and find out but I don't have a test box and I need an answer for the app folks. So did you just put the http keepalive on the backend service, like so? If not, would you be so kind as to post a config example? Thanks!

service backend2

ip address 10.1.1.21

type ssl-accel-backend

port 81

keepalive port 8003

add ssl-proxy-list my_secure_site

keepalive type http

keepalive method get

keepalive uri "/index.html"

protocol tcp

active

Re: Backend SSL and http keepalives

Gilles Dufour — Mon, 05 Sep 2005 06:01:51 GMT

you can do http keepalive with any version on a backend service.

All you need is this :

keepalive type http

keepalive port 80

keepalive uri "..."

The CSS does not require the service type to match the keepalive type.

Regards,

Gilles