Using SSL Module to Encrypt HTTP post to external Server

[cnohrden]

I would like to know if it's possible for a CSM with its SSL module to receive an HTTP POST from our internal web servers, encrypt that POST w/ SSL, and finally to forward the newly created SSL transmission to a remote external SSL server? If it is possible, is this good practice or is it better to let the web server do the encryption?

[Gilles Dufour]

this is possible.

It is good practice if you do not want to overload your server with the heavy task of encryption/decryption.

If your server is very powerfull and far from being used to its maximum capacity, you can do it on the server.

Another advantage of using an SSL module is that the CSM will see your request in clear text and can therefore perform so *smart* loadbalancing before it gets encrypted by the SSL module.

[ie: cookie stickyness, url hashing, ...]

Regards,

Gilles.

[cnohrden]

This sounds like it may be worth pursuing.

Are there any examples of how this would be configured on the 6500 CSM and SSL Modules?

Thank you.

[Gilles Dufour]

here is a sample config

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a0080216c16.shtml

Gilles.