Cisco 11503 - CSS Content Services Switch Configuration Manual page 148

Chapter 5 Configuring Back-End SSL
Configuring Back-End SSL Servers in an SSL Proxy List
Enter a TCP SYN inactivity timeout value in seconds, from 0 (TCP SYN timeout
disabled) to 3600 (1 hour). The default is 30 seconds. When you set the command
to 0, the timer becomes inactive and the retransmit timer eventually terminates a
broken TCP connection.
The connection timer should always be less than the retransmit termination time
Note
for new SSL and TCP connections.
To configure the TCP SYN timeout of 100 seconds, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp virtual
syn-timeout 100
To disable the timeout, set the value to 0:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp virtual
syn-timeout 0
To reset the timeout to the default value of 30 seconds, enter:
(config-ssl-proxy-list[ssl_list1])# no backend-server 1 tcp virtual
syn-timeout
Specifying a TCP Inactivity Timeout for a Virtual Client Connection
The TCP inactivity timeout begins once the CSS receives an ACK from the client
to terminate the TCP three-way handshake. The inactivity timer resumes
immediately following where the SYN timer stops, with regard to traffic flow. Use
the backend-server number tcp virtual inactivity-timeout seconds command to
specify a timeout value that the CSS uses to terminate a TCP connection with the
client and the SSL module when there is little or no activity occurring on the
connection.
Enter a TCP inactivity timeout value in seconds, from 0 (TCP inactivity timeout
disabled) to 3600 (1 hour). The default is 240 seconds.
Based on the default parameters for retransmission, the timer value should be
larger than 60 seconds (1 minute).
Cisco Content Services Switch SSL Configuration Guide
5-12
OL-5655-01