css and delayed binding

[STEVE FLIS]

At what rule layer does a css perform delayed binding?

Does a css perform delayed binding on a l3 or l4 content rule or does the inital syn pass directly from the client to the server?

Thanks

[Gilles Dufour]

only when we need to see the content do we do delayed binding.

This is layer 5 rule where we need to see a cookie or a URL or an SSL session ID, ...

For L3 and L4, with the initial packet we are able to make the loadbalancing decision, so no late binding.

Gilles.

[stevehall]

The CSS will forward the client "SYN" packet directly to the server on any layer 3 or 4 rule. If it is a layer 5 rule, then the CSS must wait until it sees the HTTP header to make a load balancing decision.

If you have a layer 4 and 5 rule for the same IP address and port (or possibly layer 3 rule with same IP) then the CSS must wait until the layer 5 information even it it hits the layer 3 or 4 rule (we dont know if it hits the layer 4 rule until after we know if it hits the layer 5 rule first)

Hope this makes sense...

-Steve