Cisco 11503 - CSS Content Services Switch Configuration Guide

Chapter 8 Examples of CSS SSL Configurations
8-4
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Note By default, the SSL session cache for the SSL module can hold 10000 sessions.
The cache size is the maximum number of SSL session IDs that can be stored in
a dedicated session cache on an SSL module. If necessary for your SSL service,
use the session-cache-size command to reconfigure the size of the SSL session ID
cache for the SSL service.
The back-end session ID cache is 4096 entries and is not configurable.
When you configure a back-end SSL server on the CSS (Figure 8-2), flow
processing from the client to CSS is the same as steps 1 through 4 in the previous
example. However in step 4 shown in Figure 8-2, the SSL module initiates an
HTTP connection to an HTTP-SSL content rule with services to a back-end SSL
server.
Figure 8-2 CSS Configuration with a Back-End SSL Server
87587
Client A
ServerABC
ServerDEF ServerGHI
L5 HTTP-SSL
Content Rule
L5/L4 SSL
Content Rule
VIP Port 80
Port 80
Web shopping
session
Payment/checkout
session
M3
M2
M1
SSL
Acceleration
Module
Ethernet
connection
CSS 11506
Port 80
VIP Port 443
Port 443
21
3
4
5
Internet
Backend SSL VIP Port 80
Backend SSL Server
IP Port 443
6

Cisco 11503 - CSS Content Services Switch Specifications

General

Brand	Cisco
Model	11503 - CSS Content Services Switch
Category	Switch
Language	English