Specifying The Nagle Algorithm For Client-Side Connections; Configuring Tcp Server-Side Connection Timeout Values On The Ssl Module - Cisco 11503 - CSS Content Services Switch Configuration Manual

Chapter 6 Configuring SSL Initiation

Specifying the Nagle Algorithm for Client-Side Connections

Configuring TCP Server-Side Connection Timeout Values on the
SSL Module
OL-5655-01
The TCP Nagle algorithm automatically concatenates a number of small buffer
messages transmitted over the TCP connection between a client and the SSL
module. This process increases the throughput of your CSS by decreasing the
number of packets sent over each TCP connection. However, the .interaction
between the Nagle algorithm and the TCP delay acknowledgment may increase
latency in your TCP connection. Disable the Nagle algorithm when you observe
an unacceptable delay in a TCP connection (clear-text or SSL).
Use the backend-server number tcp virtual nagle command to disable or
reenable the Nagle algorithm for the TCP connection between the client and the
SSL module. The syntax for this command is:
backend-server number tcp virtual nagle enable|disable
To disable the Nagle algorithm for the TCP connection between the client and the
SSL module, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp virtual nagle
disable
To reenable the Nagle algorithm for the TCP connection between the client and
the SSL module, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp virtual nagle
enable
The TCP connection between the SSL module and a server is terminated when the
specified time interval elapses. The TCP timeout functions enable you to have
more control over TCP connections between the CSS SSL module and a server.
To configure the timeout values of a TCP connection with the server, see the
following sections:
Specifying a TCP SYN Timeout Value for a Server-Side Connection
•
Specifying a TCP Inactivity Timeout for a Server-Side Connection
•
Specifying the Nagle Algorithm for Server-Side Connections
•
Configuring Back-End SSL Servers in an SSL Initiation Proxy List
Cisco Content Services Switch SSL Configuration Guide
6-15