Re: Replacement to CSS
Surya ARBY <[email protected]> Tue, 14 Jul 2009 19:15:04 +0000 (GMT)
| Newsgroups | gmane.comp.programming.load-balancing.general |
|---|---|
| Message-ID | <[email protected]> |
Hello Robbie. You're right when you say the ACE CLI is very close to mqc, with the massive use of class-map, policy-map and service-policy (just like a QOS config) but I also find some inheritance from the CSS era (for example the "set persistance rebalance" and some other specific commands) :) About the #2, yes there are lot of feature disparities between the ACE module and appliance, OSPF RHI is only one of them. Other are more located within the SSL processing area About #3, when using SSL offload, you make SSL termination so you hide client's informations to the back end servers. For logging purpose, some applications will have to log some informations (whole client's certificate or only specific fields) so it can be inserted into the value on some field in HTTP headers, just like transmitting the incoming client IP address when using Source NAT (aka client NAT) regards, Surya router# show problem | include solution --- En date de : Mar 14.7.09, [email protected] <[email protected]> a écrit : De: [email protected] <[email protected]> Objet: Re: [load balancing] Replacement to CSS À: "Load Balancing Mailing List" <[email protected]> Cc: "Load Balancing Mailing List" <[email protected]>, [email protected] Date: Mardi 14 Juillet 2009, 20h38 point #1, i'd still have to disagree with. that's going to be part and parcel of almost any load-balancer configuration, regardless of what you call it. the actual cli is still much closer to ios/mqc than it is to arrowpoint/webns, no matter the name. examination of 'show run' on the css vs. the ace illustrates the point pretty well. point #2, i was not aware that there was feature disparity in that regard between the appliance and the service module. interesting. point #3, what specific information would you want to insert? the certificate info/signature that the client is providing? i must admit ignorance on this part - i've not had much experience with using client certs in this manner. -- robbie _______________________________________________ lb-l mailing list [email protected] http://vegan.net/mailman/listinfo/lb-l Searchable Archive: http://vegan.net/lb/archive http://lbdigest.com Load Balancing Digest http://lbwiki.com Load Balancing Wiki