SSL Keep alive setting? F5 LTM

What's the issue you're trying to address? Are you looking at client or server side connections? Are you trying to reduce the number of SSL handshakes performed or TCP connections established?

 

 

Thanks,

 

Aaron

We are trying to reduce the number of SSL handshakes. This would be for both client and server side connects.

Did you get resolution. I know that enabling SSL keepalive with tomcat / apache greatly reduces number of SSL connections you have to establish.

You can use a OneConnect profile with a /32 netmask to have LTM re-use serverside TCP connections for the same client IP. If you don't need to see the original client IP address on the servers, you could use SNAT on the VIP and then use a /0 netmask for very efficient re-use of serverside connections.

 

 

See this page for details on OneConnect:

 

 

http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/oneconnect

 

 

Aaron