One-Armed Non-Transparent Proxy - Cisco CSS11501S-C-K9 Configuration Manual

Use with the CSS

One-Armed Non-Transparent Proxy

Cisco 11000 Series Secure Content Accelerator Configuration Guide
B-10
keepalive maxfailure 3
no keepalive enable
end
end
This deployment uses a single CSS for load balancing SSL offloading and Layer 5
switching, allowing load balancing at up to the limit of transactions per second of
the CSS. Applications such as reverse proxy caching and content type separation
can be enabled.The level depends upon the type of content and the mix of
HTTP 1.0 and HTTP 1.1 traffic.
The one-armed non-transparent proxy deployment is complex to configure, but it
provides a high degree of scalability. If IP address accounting is required, use the
command log-url when configuring the Secure Content Accelerator. This
command instructs the device to write a client access log to a specific host. The
resulting log file can be utilized by all popular log analysis tools. Figure B-4
shows a typical deployment.
Appendix B Deployment Examples
78-13124-06