topic flow-timeout-multiplier and HTTPS termination in Application Networking

flow-timeout-multiplier and HTTPS termination

astrand — Fri, 17 Mar 2006 10:19:36 GMT

Hi,

We have three Cisco CSS 11501 and have some intermittent problems with timeouts for a web-based application. After reading threads in this forum I have concluded that increasing the flow-timeout-multiplier could solve the issue.

We are terminating HTTPS connections in our CSSs and then use HTTP for the connections to the server. Should the flow-timeout-multiplier be applied on the HTTPS or HTTP content rule, or both?

Thanks for your help!

Regards,

Harald

Re: flow-timeout-multiplier and HTTPS termination

Gilles Dufour — Fri, 17 Mar 2006 11:29:07 GMT

Harald,

you should configure it on both.

Moreover, the SSL module has its own set of timeouts.

CSS11503(config-ssl-proxy-list[gdufour])# ssl-server 1 tcp server inactivity-timeout ?

Integer value(Range: 0-3600)

This is a timeout for the server side connection, but there is another one for the client side.

Check all TCP options.

Gilles.

Re: flow-timeout-multiplier and HTTPS termination

astrand — Mon, 20 Mar 2006 16:06:20 GMT

What is the guideline for setting the inactivity timeout (server and virtual) for the SSL module?

Should it typically be set higher than the flow timeout, since it is by default (240 seconds)?

Thanks again for your help!

Regards,

Harald

Re: flow-timeout-multiplier and HTTPS termination

Gilles Dufour — Tue, 21 Mar 2006 11:18:46 GMT

Harald,

you should adjust the timeout with the timeout on the servers. Make it just slightly higher on the CSS than what you have on the server.

Gilles.