Forum Discussion

William_Them_99's avatar
William_Them_99
Icon for Nimbostratus rankNimbostratus
Aug 15, 2006

Session Add differences

Can anyone explain to me the difference between:

 

 

session add ssl

 

 

and

 

 

session add uie

 

 

 

Also, we have an iRule that controls the authentication of client certificates at a backend LDAP server. It seems as though the authentication of the cert (which happens only once at the first hit to the virtual server) eventually times out...is that normal? Is it controlled by the Cache Timeout on the client SSL profile?

 

 

I know I may need to open a case to get an explanation on the second point, but thought I'd ask here first.

 

 

Thanks.
  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    As for the difference between "ssl " and "uie " - it's very subtle. It has to do with key name space. Basically, if the keys are referenced differently, they don't get intermixed (eg: ssl keys do not mix with uie keys). If you use the same key name space, then if by chance, you ended up with two keys that happened to match (say one from a cookie and one from a ssl session id), then you would get the same persist record. So, it's just a means of keeping keys distinguished from one another (eg: ssl keys are kept separate from uie keys). As you've probably figured out, it doesn't effect whether or not it works and you could certainly use either key name space.

     

     

    As for the second part of you post, it's really hard to tell without seeing alot more of your configuration, the iRules you might have in place and the number of connections that are coming from the client. It would be a lot easier for support to gather that information.