Application Networking

Gilles,is it possible to use the same server tcp port number in 2x ssl-proxy services that share the same vip address?e.g.vserver TEST_443virtual 1.1.1.1 tcp 443serverfarm SSL_MODULE persistent rebalanceinservicessl-proxy service TEST_443virtual ipad...

Hi, This Cisco whitepaper alludes to"Active Cookie Insert" or "Cookie Matching" which are ideal for our application.http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_white_paper09186a0080108974.shtml However BEA servers also perform URLR...

Looking for help with a sticky setting on a CSS Content Switch. I have 3 (IIS 6.0) web servers which connect to a SQL2K application that clients connect to via the CSS using SSL. The CSS has a ssl module which decrypts the traffic and sends http to t...

Does anyone know if these products will support Secure FTP. I need a product that will decrypt the SFTP on the front end then load balance the unsecure FTP to an FTP server farm on the backend.ThanksTom

Hi, How does one disable plaintext http access to the VIP of the 11501. In other words, is it possible to have the device listen _only_ on 443 and not on port 80 for incoming requests? We are do not want to provide plain http access to the VIP which ...

Hi all, Being a neophite to CSSs and content switching in general, I'm looking for the best practice to access backend servers. I have two frontend servers on a 11501 bridged over to my internal network. All my rules are set and appear to be working ...

I have a one-armed CSS balancing 9 web sites in production & am adding a redundant CSS & a pair of one armed SCA2. The servers currently see the clients addresses. Are there any sample CSS /SCA configs using the transparent local-listen? Is there a r...

Hello Gilles,I have setup cookie stickiness using the following config:sticky 1 cookie JSESSIONID timeout 100serverfarm xxxxxreal 192.168.1.1health probe HTTP01 inservicereal 192.168.1.2health probe HTTP02 inservicepolicy pol_IOW_stickserverfarm xxxx...

Hi, Is it possible to dynamically throttleapplication specific traffic with the QOS and or ACL capabilities of the6500 CSM? More general question might be is if there exists devices that allow application traffic to be throttledup/down at near real-t...

In our network, the GSS replies to the url queries with an A-record. It returns IP addresses hosted by active/backup CSS boxes located at 2 different sites. GSS monitors the health of the sites/CSS using KAL-AP.The CSS are configured in a 'Routing' t...

Hello,I am having a problem with the CSS. When I "Show ip-fragment-stats", the "Collection Timeout" count keep increasing and clients failed. However, I cannot find any command to adjust the time for collection. I think the timeout in the CSS is too ...

Hi,In a global load balancing project, I need to report more accurate load information to the GSS as the CSS can report natively via KAL-AP (load based on response time). The new protocol SASP, developped by IBM and Cisco should allow to inform the C...

Okay all you CSS gurus, riddle me this one. I have a CSS11503 with SSL mod. This is a testing configuration very soon to become production sitting in a DMZ. We tried to get SNTP to sync to a known working NTP server inside the FW and couldn't. We fin...

I can see from the threads in the forum that it is a bit of a struggle to get servers behind the CSS to successfully hit time (NTP) servers out in the real world. I want the four servers behind the CSS to each hit an outside server independantly.I di...

We have layer 2 connectivity between to core sites and are implementing two new CSS11501's. Is it possable to implement these in a active/backup configuration and stateful?