Suspending The Ssl Service; Configuring A Content Rule For Ssl Initiation - Cisco 11503 - CSS Content Services Switch Configuration Manual

Chapter 6 Configuring SSL Initiation

Suspending the SSL Service

Configuring a Content Rule for SSL Initiation

OL-5655-01
To suspend an SSL service and remove it from the pool for future load-balancing
SSL content requests, use the suspend command. Suspending an SSL service
does not affect existing content flows, but it prevents additional connections from
accessing the service for its content.
You must suspend a service before you can reactivate its SSL proxy list.
To suspend service ssl_serv1, enter:
(config-service[ssl_serv1])# suspend
For the CSS to encrypt clear client requests for content, apply the SSL initiation
services to content rules. A content rule defines:
Where the content physically resides
•
Where to direct the request for content (which SSL initiation services)
•
Which load-balancing method to use
•
For an HTTP server or back-end SSL server content rule, ensure that each
configured service IP address matches an IP address configured for an SSL
initiation server in the SSL proxy list (see the
SSL Initiation Server"
For an SSL initiation content rule, you can specify a Layer 5 cookie or URL rule.
The information in the rule enables the CSS to locate a sticky server to use or to
load balance a new server for a new client request.
For more information on Layer 5 sticky and content rules, refer to the Cisco
Content Services Switch Content Load-Balancing Configuration Guide.
Configuring a Content Rule for SSL Initiation
section).
Cisco Content Services Switch SSL Configuration Guide
"Configuring an IP Address for the
6-29