Specifying A Tcp Inactivity Timeout For A Server-Side Connection - Cisco 11503 - CSS Content Services Switch Configuration Manual

Chapter 5 Configuring Back-End SSL
Configuring Back-End SSL Servers in an SSL Proxy List
Enter a TCP SYN timeout value in seconds, from 0 (TCP SYN timeout disabled)
to 3600 (1 hour). The default is 30 seconds. When you set the command to 0, the
timer becomes inactive and the retransmit timer eventually terminates a broken
TCP connection.
The connection timer should always be less than the retransmit termination time
Note
for new SSL and TCP connections.
For example, to configure the TCP SYN timeout of 100 seconds for the
server-side connection, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp server
syn-timeout 100
To disable the timeout, set the value to 0:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp server
syn-timeout 0
To reset the timeout to the default value of 30 seconds, enter:
(config-ssl-proxy-list[ssl_list1])# no backend-server 1 tcp server
syn-timeout

Specifying a TCP Inactivity Timeout for a Server-Side Connection

The TCP inactivity timeout begins once the CSS receives a SYN/ACK from the
server. The inactivity timer resumes immediately following where the SYN timer
stops, with regard to traffic flow. Use the backend-server number tcp server
inactivity-timeout seconds command to specify a timeout value that the CSS uses
to terminate a TCP connection with a server when there is little or no activity
occurring on the connection.
Enter a TCP inactivity timeout value in seconds, from 0 (TCP inactivity timeout
disabled) to 3600 (1 hour). The default is 240 seconds.
For example, to configure the TCP inactivity timeout period of 100 seconds for
the server-side connection, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp server
inactivity-timeout 100
Cisco Content Services Switch SSL Configuration Guide
5-14
OL-5655-01