cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
384
Views
0
Helpful
1
Replies

Backend SSL URL filtering CSS 11501 w/SSL module

csbowser
Level 1
Level 1

I currently have 2 test web servers that are being frontend'd by a CSS 11501 w/SSL module. During the second content rule lookup (during the backend ssl setup) which is decrypted and in clear text, I am redirecting the traffic to different backend servers for a SSL session. This works fine with my test servers which I am segmenting from the other SSL/443 traffic by port translation on a network device (Snapgear - to be replaced by a PIX ASAP) below are the current content rules/URL srings that work fine.

content ssl_backend

vip address 10.1.11.111

add service ssl_test_1

advanced-balance arrowpoint-cookie

protocol tcp

port 81

url "//www.acme.com:8001/web1/*"

active

content ssl_backend_2

vip address 10.1.11.111

add service ssl_test_2

advanced-balance arrowpoint-cookie

protocol tcp

port 81

url "//www.acme.com:8001/web2/*"

active

When I put the content rules (see below) in production with no port translation and push straight 443 traffic to the CSS .. the backend SSL session never sets up ( I see 2 flows from the sho ssl flows command).

content ssl_employee_backend

vip address 10.1.11.111

add service ssl_employee

advanced-balance arrowpoint-cookie

protocol tcp

port 81

url "//www.acme.com/employee/*"

active

content ssl_time_backend

vip address 10.1.11.111

add service ssl_time

advanced-balance arrowpoint-cookie

protocol tcp

port 81

url "//www.acme.com/timesheet/*"

active

Does anyone have this type of setup working?

Do I need to include a port number in the URL string (i.e. :443).

Can I debug the traffic the SSL module sees?

Thanks in advance ....

Paul

1 Reply 1

thomas.chen
Level 6
Level 6

I am not aware of your problem, But i provide you the link which helps you more specific about the configuration.

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_740/getstart/sticky.htm#wp1115519

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: