Local Director supports SSL3 sticky sessions so if you're just using SSL3 LD
will send requests with SSL sessions back to the original server that the
load balancer picked. It doesn't handle SSL2 at all in this configuration
though and you'll end up seeing error pages in the browser.

If you do need SSL2 you could try using client IP based sticky sessions.
This may cause load imbalances though.

-----Original Message-----
From: Bal�zs Nagy
To: [EMAIL PROTECTED]
Sent: 11/5/00 8:48 PM
Subject: Re: Sharing SSLSessionCache in load balanced environment

Wohlgemuth, Michael J. wrote:

> So it looks like the only option for us is to route each given client
to the
> same webserver for all the requests.  We have some Cisco
LocalDirectors in
> house for this purpose.  Does anyone have any experience in the real
world
> on doing this?  I'm a bit concerned that balancing in this manner will
lead
> to a few heavy users managing to hammer one of the servers while the
others
> sit relatively unused.  My fears are probably a bit exaggerated, but
how
> unbalanced should I expect it to get?  Any tips on things I should
either
> definitely do or definitely avoid in the configuration?

I'm not sure which model of Cisco gear you're using. Some Cisco models
allow different load balancing methods. Whereas with round robin, if
you're unlucky, you can experience occasional problems, you should be
able
to select load balancing based on utilization. Even lower end
Acedirector (Alteon, Nortel) can do that, so your Cisco might be able to
do
that too. If not, ask about an upgrade, as switching to Alteon would
cost you over $10k.
-- 
Cheers,
        Bal�zs

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to