Specifying The Nagle Algorithm For Ssl Tcp Connections - Cisco 11503 - CSS Content Services Switch Configuration Manual
Content services switch ssl configuration guide
Hide thumbs
Also See for 11503 - CSS Content Services Switch:
- Administration manual (392 pages) ,
- Hardware installation manual (184 pages) ,
- Getting started manual (142 pages)
Table of Contents
Advertisement
Chapter 4
Configuring SSL Termination
Specifying the Nagle Algorithm for SSL TCP Connections
OL-5655-01
For example, to configure a TCP inactivity time of 30 minutes (1800 seconds),
enter:
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 tcp server
inactivity-timeout 1800
To reset the TCP inactivity timer to the default of 240 seconds, enter:
(config-ssl-proxy-list[ssl_list1])# no ssl-server 20 tcp server
inactivity-timeout
The TCP Nagle algorithm automatically concatenates a number of small buffer
messages transmitted over the TCP connection between a client and the SSL
module or between a server and the SSL module. This process increases the
throughput of your CSS by decreasing the number of packets sent over each TCP
connection. However, the interaction between the Nagle algorithm and the TCP
delay acknowledgment may increase latency in your TCP connection. Disable the
Nagle algorithm when you observe an unacceptable delay in a TCP connection
(clear-text or SSL).
Use the ssl-server number tcp virtual nagle command to disable or reenable
•
the Nagle algorithm for the TCP connection between the client and the SSL
module. The syntax for this command is:
ssl-server number tcp virtual nagle enable|disable
To disable the Nagle algorithm for the TCP connection between the client and
the SSL module, enter:
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 tcp virtual
nagle disable
To reenable the Nagle algorithm for the TCP connection between the client
and the SSL module, enter:
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 tcp virtual
nagle enable
Use the ssl-server number tcp server nagle command to disable or reenable
•
the Nagle algorithm for the TCP connection between the server and the SSL
module. The syntax for this command is:
ssl-server number tcp server nagle enable|disable
Configuring Virtual SSL Servers for an SSL Proxy List
Cisco Content Services Switch SSL Configuration Guide
4-45
Advertisement
Table of Contents
