6-29
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Chapter 6 Configuring SSL Initiation
Configuring a Content Rule for SSL Initiation
Suspending the SSL Service
To suspend an SSL service and remove it from the pool for future load-balancing
SSL content requests, use the suspend command. Suspending an SSL service
does not affect existing content flows, but it prevents additional connections from
accessing the service for its content.
You must suspend a service before you can reactivate its SSL proxy list.
To suspend service ssl_serv1, enter:
(config-service[ssl_serv1])# suspend
Configuring a Content Rule for SSL Initiation
For the CSS to encrypt clear client requests for content, apply the SSL initiation
services to content rules. A content rule defines:
• Where the content physically resides
• Where to direct the request for content (which SSL initiation services)
• Which load-balancing method to use
For an HTTP server or back-end SSL server content rule, ensure that each
configured service IP address matches an IP address configured for an SSL
initiation server in the SSL proxy list (see the “Configuring an IP Address for the
SSL Initiation Server” section).
For an SSL initiation content rule, you can specify a Layer 5 cookie or URL rule.
The information in the rule enables the CSS to locate a sticky server to use or to
load balance a new server for a new client request.
For more information on Layer 5 sticky and content rules, refer to the Cisco
Content Services Switch Content Load-Balancing Configuration Guide.