For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Juanma_47808's avatar
Juanma_47808
Icon for Nimbostratus rankNimbostratus
Mar 30, 2008

SSL session never ends

  Hello,     I am trying to configure a https virtual server to load balance four WEB servers.   When a client ends his ssl session and tries to connect to again, he ocasionally rece...
application delivery
dev
devops
iRules
Nicolas_Menant's avatar
Nicolas_Menant
Icon for Employee rankEmployee
Apr 07, 2008
Hi,

 

 

If you want to maintain some CPU saving on your server you may use the oneconnect profile but you should specify a mask of 255.255.255.255. This way one client won't be able to use the TCP connection of another client (if you don't have clients coming through a proxy...)

 

 

One comment about ssl persistence. By default the internet explorer 6 will renegociate client's SSL session ID every 2 minutes. Which means the client will be load balanced again and may have to authenticate himself again...

 

 

HTH