Figure 8-1 Css Configuration With Multiple Ssl Modules - Cisco 11503 - CSS Content Services Switch Configuration Manual

Figure 8-1
configured to off load the SSL traffic from the back-end servers (ServerABC,
ServerDEF, and ServerGHI).
consistent stickiness between HTTP and SSL connections from the same client.
1.
Figure 8-1
Web shopping
Cisco Content Services Switch SSL Configuration Guide
8-2
illustrates a CSS with three SSL modules (M1, M2, and M3)
In a normal Web shopping-cart application, a transaction consists of multiple
HTTP connections for shopping or browsing, and a few SSL connections for
the final order placement and payment checkout sequence. The client must
remain stuck to the same server that holds the customer's database
information during the entire transaction. During the initial HTTP
connections from a client to a server, the client is stuck to a server by using
Layer 5 HTTP cookies or a URL content rule. At checkout, the client
transitions to SSL connections.
CSS Configuration with Multiple SSL Modules
Client A
Port 80
Internet
1
session
L5/L4 SSL
Content Rule
L5/L4 HTTP
Content Rule
5
Port 80 Port 80
ServerABC
Chapter 8
Figure 8-1 also shows the CSS maintaining a
Port 443
Payment/checkout
2
session
3
Port 443
Acceleration
4
Port 80
ServerDEF ServerGHI
Examples of CSS SSL Configurations
SSL
Module
M3
M2
M1
CSS 11506
Ethernet
connection
OL-5655-01