Cisco CSS11501 - 100Mbps Ethernet Load Balancing Device, Configuration Manual

Page: 176 / 432

Appendix B Deployment Examples
Use with the CSS
B-16
Cisco 11000 Series Secure Content Accelerator Configuration Guide
78-13124-05
!*************************** OWNER ***************************
owner test
content http-non-secure-port-80
vip address 10.176.11.100
protocol tcp
port 80
url "/*"
add service s1
add service s2
add service s3
add service s4
active
content http-secure-port-81
vip address 10.176.11.100
add service s1
add service s2
add service s3
add service s4
protocol tcp
port 81
url "/secure/*"
active
One-Armed Non-Transparent Proxy
This deployment uses a single CSS for load balancing SSL offloading and Layer 5
switching, allowing load balancing at up to the limit of transactions per second of
the CSS. Applications such as reverse proxy caching and content type separation
can be enabled.The level depends upon the type of content and the mix of
HTTP 1.0 and HTTP 1.1 traffic.
The one-armed non-transparent proxy deployment is complex to configure, but it
provides a high degree of scalability. If IP address accounting is required, use the
command log-url when configuring the Secure Content Accelerator. This
command instructs the device to write a client access log to a specific host. The
resulting log file can be utilized by all popular log analysis tools. Figure B-5
shows a typical deployment.