Forum Discussion

David_Tumlin's avatar
David_Tumlin
Icon for Nimbostratus rankNimbostratus
Aug 15, 2012

Network failover vs. serial failover on Edge appliances

Multiple F5 technicians have suggested to a customer of mine that moving from serial to network failover on their Edge Gateways would reduce the downtime in reconnecting user sessions after a failure....
application delivery
availability
LTM
TMOS
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 15, 2012
That's correct:

 

 

sol7216: The BIG-IP LTM system does not support connection mirroring for SSL terminated traffic

 

https://support.f5.com/kb/en-us/solutions/public/7000/200/sol7216.html

 

 

If you'd like to see support for SSL session cache mirroring which would allow a client to resume an SSL session after a failover you can open a case with F5 Support and reference BZ227230.

 

 

APM should mirror session data to its peer using the network failover config so that users won't need to re-authenticate after a failover. They would need to establish a new TCP connection and SSL session though.

 

 

Aaron