SSL Offloading

Today we are going to setup SSL offload for a VS.


1) First lets check that CS is enabled.

> sh ns feature | grep 'SSL Offloading'
 9)     SSL Offloading                 SSL                  OFF
>
> enable ns feature SSL
 Done
>
> sh ns feature | grep 'SSL Offloading'
 9)     SSL Offloading                 SSL                  ON
>


2) Add IPs, VLANs and Bind them together.

add ns ip 192.168.20.10 255.255.255.0 -type SNIP
add ns ip 172.16.100.10 255.255.255.0 -type SNIP
add vlan 20
add vlan 100
bind vlan 20 -ifnum 1/1
bind vlan 20 -ipaddress 192.168.20.10 255.255.255.0
bind vlan 100 -ifnum 1/2
bind vlan 100 -ipaddress 172.16.100.10 255.255.255.0

> sh ns ip
        Ipaddress        Traffic Domain  Type             Mode     Arp      Icmp     Vserver  State
        ---------        --------------  ----             ----     ---      ----     -------  ------
1)      192.168.10.10    0               NetScaler IP     Active   Enabled  Enabled  NA       Enabled
2)      192.168.20.10    0               SNIP             Active   Enabled  Enabled  NA       Enabled
3)      172.16.100.10    0               SNIP             Active   Enabled  Enabled  NA       Enabled
 Done
> 

Basic Content Switching

This post will show a basic Content Switching (CS) setup.

We will have 2 clients: 192.168.20.50 and 192.168.20.60. 

They will both access the same CS VIP 192.168.20.100

Client .50 will be redirected to an internal VIP which will load balance 4 servers that as a group we will call pool1 and client .60 will be redirected to a different internal VIP that will load balance 4 servers we will call group 2.

So in this lab the CS is therefore happening based on the source IP of the client.