Re: CSM & SSL-ID Stickyness & MS IE as SSL-Client

v.kreisel · ‎01-17-2005

Hello,

I am running a CSM 4.1.1 and a vserver configured with SSL stickyness. As https client I use MS IE 6.

The problem is that MS IE renegotiates the SSL Session every 30 sec to 2 minutes. (new SSL-ID)

This means that SSL-ID stickyness cannot be kept.

I know this is not a problem of the CSM but I hope that somebody who had the same problem in the field

could give my a suggestion or tell me a workaround

for a way how this problem could be handled.

Thanks a lot in advance for your answers.

Volker

sticky 20 ssl timeout 60

vserver REVERSE-PROXY

virtual 10.35.29.50 tcp https

serverfarm REVERSE-PROXY

sticky 60 group 20

replicate csrp connection

persistent rebalance

inservice

Gilles Dufour · ‎01-17-2005

there is not much solution available.

You either use a sticky source-ip config or you use an ssl module to decrypt the traffic and do cookie sticky.

Regards,

Gilles.