Specifying A Tcp Inactivity Timeout For A Server-Side Connection; Specifying The Nagle Algorithm For Server-Side Connections - Cisco 11503 - CSS Content Services Switch Configuration Manual

Content services switch ssl configuration guide
Hide thumbs Also See for 11503 - CSS Content Services Switch:
Table of Contents

Advertisement

Chapter 6
Configuring SSL Initiation

Specifying a TCP Inactivity Timeout for a Server-Side Connection

Specifying the Nagle Algorithm for Server-Side Connections

OL-5655-01
The TCP inactivity timeout begins once the CSS receives a SYN/ACK from the
server. The inactivity timer resumes immediately following where the SYN timer
stops, with regard to traffic flow. Use the backend-server number tcp server
inactivity-timeout seconds command to specify a timeout value that the CSS uses
to terminate a TCP connection with a server when there is little or no activity
occurring on the connection.
Enter a TCP inactivity timeout value in seconds from 0 (TCP inactivity timeout
disabled) to 3600 (1 hour). The default is 240 seconds.
For example, to configure the TCP inactivity timeout period of 100 seconds for
the server-side connection, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp server
inactivity-timeout 100
To disable the timeout, set the value to 0:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 tcp server
inactivity-timeout 0
To reset the timeout to the default value of 240 seconds, enter:
(config-ssl-proxy-list[ssl_list1])# no backend-server 1 tcp server
inactivity-timeout
The TCP Nagle algorithm automatically concatenates a number of small buffer
messages transmitted over the TCP connection between a back-end server and the
SSL module. This process increases the throughput of your CSS by decreasing the
number of packets sent over each TCP connection. However, the interaction
between the Nagle algorithm and the TCP delay acknowledgment may increase
latency in your TCP connection. Disable the Nagle algorithm when you observe
an unacceptable delay in a TCP connection (clear-text or SSL).
Use the backend-server number tcp server nagle command to disable or
reenable the Nagle algorithm for the TCP connection between the server and the
SSL module. The syntax for this command is:
backend-server number tcp server nagle enable|disable
Configuring Back-End SSL Servers in an SSL Initiation Proxy List
Cisco Content Services Switch SSL Configuration Guide
6-17

Advertisement

Table of Contents
loading

This manual is also suitable for:

11500 series

Table of Contents