Forum Discussion

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 22, 2009
    What's the issue you're trying to address? Are you looking at client or server side connections? Are you trying to reduce the number of SSL handshakes performed or TCP connections established?

     

     

    Thanks,

     

    Aaron
  • ngmocoit_66829's avatar
    ngmocoit_66829
    Icon for Nimbostratus rankNimbostratus
    Oct 22, 2009
    We are trying to reduce the number of SSL handshakes. This would be for both client and server side connects.
  • lopezal_55485's avatar
    lopezal_55485
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2010
    Did you get resolution. I know that enabling SSL keepalive with tomcat / apache greatly reduces number of SSL connections you have to establish.
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Apr 06, 2010
    You can use a OneConnect profile with a /32 netmask to have LTM re-use serverside TCP connections for the same client IP. If you don't need to see the original client IP address on the servers, you could use SNAT on the VIP and then use a /0 netmask for very efficient re-use of serverside connections.

     

     

    See this page for details on OneConnect:

     

     

    http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/oneconnect

     

     

    Aaron