ACE SSL Offloading slowness

[Steev112]

                   Dear All,

i have configured SSL offloading it was working fine, suddenly i faced slowness when we access the web server through SSL offloading while with HTTP access the web site no slowness. Can you please check the configuration and how can troubleshoot this issue and solve it?

[Cesar Roque]

Hi Steven,

Try keeping only the class-default in the policy type lb, it should look like this:

policy-map type loadbalance first-match STATISTICS-WEB-SERVER-LB

  class class-default

    sticky-serverfarm Sticky-STATISTICS-WEB-SERVER

If this does not work, we need to gather a capture showing both sides of the connection.  If this is an ACE module a tengig capture is what we need.

---------------------
Cesar R
ANS Team

[Jorge Bejarano]

In addition to what Cesar stated, you may want to see some captures to see if the headers are too big or contain invalid characters then at that point you may need to have http parameter as below and then apply under your class-map under the policy multi-match.

parameter-map type http PARAMETER-HTTP

  case-insensitive

  persistence-rebalance

  set header-maxparse-length 65535

  set content-maxparse-length 65535

  length-exceed continue

  parsing non-strict

Additionally, there´s some delay in the way the ACE process L7 requests then you can test with a parameter like this: but please read this link first then you can have a better understanding of what I mean:

https://supportforums.cisco.com/thread/2129952

 parameter-map type connection Connection
      set tcp wan-optimization rtt 0

Jorge