CSS 11503 SSL Module

[unitus]

This question has been asked before, but I can't find a clear answer. We have a CSS11503 with the SSL module. My question is how many connections can it handle?? The data sheet says "The SSL module delivers 1000 SSL transactions per second." So when I issue the command 'show ssl flows' and see:

CSS# sho ssl flows

SSL Acceleration Flows for slot 3

Virtual Port TCP Proxy Flows Active SSL Flows SSL Flows in Handshake

--------------- ---- --------------- ---------------- ----------------------

xxx.xxx.1.46 443 0 0 0

xxx.xxx.1.53 443 167 66 2

xxx.xxx.1.209 443 0 0 0

xxx.xxx.1.45 82 5 1 0

xxx.xxx.1.45 443 376 157 0

xxx.xxx.1.214 443 0 0 0

xxx.xxx.1.50 443 0 0 0

xxx.xxx.1.44 993 881 802 20

xxx.xxx.1.210 443 0 0 0

xxx.xxx.1.52 443 0 0 0

or the command 'sho service summary | grep ssl' and see: ssl_service_mod3 Alive 929 1 18 0

Does this mean we are nearing the end-limit of this module???!

[Gilles Dufour]

The limit is more in term of CPU and memory.

So do a 'sho system-resources' and check the CPU and memory available for your SSL module.

A flow could be active, which actually means alive, but with very few traffic going through. In this case, the number of transaction per second will be low and you could have a lot of active flows.

On the other hand, a few flows that are very active, could consume a lot of resources.

So, check the CPU and memory.

Regards,

Gilles.