[c-nsp] Cisco load balancers with SSL offload

[Gert Doering]

Hi,

On Mon, Apr 16, 2007 at 08:01:47PM +0200, Marcin Mazurek wrote:
> > (I assume that both the CSM and the ACE can do SSL "out of the box", and
> > you just need to have the right license, that is, "don't buy extra 
> > doughter cards"?)
> 
> CSM dosn't support SSL offload, ACE does. With CSM You may use SSL
> offload module, separate blade for cat6.

Ah.  Important information, thanks.

> I would skip CSM as ACE is next generation product (contexts, TCP
> offload, active-active also per context, many more).

Given that ACE also seems to be a good deal less money, this is good
advice :-)

> You may want to take a look at F5 and Juniper products, nice feature are
> rules that You can check You traffic in L7 without significant
> performance decrease.

Customer is explicitely asking for Cisco...

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de