Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Mar 22, 2010

OneConnect and Proxy/Squid Load Balancing

Hi All,     We provide proxy services (http/https) to a large number of schools (each with their own static IP). Each school can have 1000's of connections to the virtual server at any time...
config
design
hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Mar 28, 2010
Hi All,

 

 

Just wondering if we are able to use SSL persistence so that schools use the same node (proxy) for HTTPS traffic (port 443)? We've had problems in the past when schools do their banking and if they do not go through the original proxy that made the HTTPS connection to the bank then the session would not be valid if they then went through a different proxy for subsequent transactions.

 

 

I've had a read of SSL persistence and it doesn't seem to do what I've described above.

 

 

https://support.f5.com/kb/en-us/solutions/public/3000/200/sol3245.html

 

 

"You can only use SSL persistence with nodes that are running SSL, where BIG-IP load balances only encrypted traffic. You cannot use SSL Persistence with any connections that are handled by an SSL proxy."

 

 

The nodes are just proxy servers and are not running any SSL. So based on the literature above, is it correct to say that SSL persistence won't help with us make HTTPS connections sticky???

 

 

Thanks.

 

 

Andy