cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
523
Views
0
Helpful
3
Replies

critical service type "ssl-accel" (not documented)

sthon-dbsys
Level 1
Level 1

I only found the documentation for critical services "scripted, redundancy uplink and local" in the advanced admin guide Rel 7.2

--snip-->

scripted - the priority changes to 0 when one service in the scripted group goes down.

redundancy uplink - the priority changes to 0 when all of the services in the uplink group go down.

local - the priority changes to 0 when all of the services in the local group go down. Local services include all services other than scripted and uplink.

<--snap---

Now I configured a critical service of type "ssl-accel".

This one looks like working, as a local service.

Is this service type supported and somewhere documentated ?

the service looks like:

service ssl_modul1

type ssl-accel

keepalive type none

slot 3

add ssl-proxy-list proxy-list-1

Critical-Services:

ssl_modul1 State: active Type: Ssl-Accel

3 Replies 3

Gilles Dufour
Cisco Employee
Cisco Employee

this is just because your service is of type ssl-accel.

And this type is required if you are using the SSL module.

I'm not sure how you could use the service ssl_modul1 without the type ssl-accel or have the critical service use a different type than the service itself.

Could you please clarify what you did exactly.

Gilles.

1. you are correct, I use the service ssl_modul1 as a normal SSL Service

2. Now if the ssl module fail, I´ll failover to the Backup CSS.

3. My question is: could I use the service "ssl_modul1" of type ssl-accel as critical service and configure this on my circuit.

In the documentation, you only find critical services of type "local, scripted and redundancy-uplink".

I tried to configure it and it looks like the critical service of type "ssl-accel" works like a critical service of type local, but I am not sure, if this supported by cisco.

mvoight
Level 1
Level 1

One thing to note is that since the keepalive type is set to none, it won't fail.

Review Cisco Networking for a $25 gift card