Dell 3-DNS Spezifikationen PDF herunterladen (Seite 187)

Proxies

BIG-IP® Reference Guide 4 - 107

To configure the rewrite feature using the Configuration

utility

1. In the navigation pane, click Proxies.

2. Click the Add button.

3. In the Rewrite Redirects box, if you want to enable the feature,

select either Matching or All. from the list. To disable the feature,

do not select an option from the box. By default, the feature is

disabled.

4. Click Done.

To configure the rewrite feature from the command line

To configure this feature from the command line, type the bigpipe proxy

command and specify the redirects rewrite argument, as follows:

b proxy <ip>:<service> redirects rewrite <<matching | all> [enable] | disable>

Configuring SSL session cache

For both client-side and server-side SSL connections, you can configure

timeout and size values for the SSL session cache.

Because each proxy maintains a separate client-side SSL session cache, the

client-side values can be configured on a per-proxy basis. For server-side

SSL connections, however, the proxy maintains a single session cache.

Thus, server-side session cache values must be configured globally.

Setting SSL Session Cache Timeout

Using either the Configuration utility or the bigpipe command, you can

specify the number of usable lifetime seconds of negotiated SSL session

IDs. The default timeout value for the SSL session cache is 300 seconds.

Acceptable values are integers greater than or equal to 5.

Clients attempting to resume an SSL session with an expired session ID are

forced to negotiate a new session.

Client-side timeout values. The client-side timeout values are configured

on a per-proxy basis. Client-side timeout values can be set to zero, which

represents no timeout.

If the timeout value for the client-side SSL session cache is set to zero, the

SSL session IDs negotiated with that proxy’s clients remain in the session

cache until either the proxy is restarted, or the cache is filled and the

purging of entries begins. Setting a value of zero can introduce a significant

security risk if valuable resources are available to a client that is reusing

those session IDs. It is therefore common practice to set the SSL session

cache timeout to a length of time no greater than 24 hours and for even

shorter periods.

1 2 ... 182 183 184 185 186 187 188 189 190 191 192 ... 425 426

Keine Kommentare

Dell 3-DNS Spezifikationen Seite 187