This message was deleted.
# citrix-netscalers
Slackbot
11/23/2023, 5:18 PMThis message was deleted.
k
Kari Ruissalo (WyW)
11/23/2023, 8:21 PMNever done it, but what about ssl session?
c
CTXMike
11/23/2023, 8:36 PMAgreed, sslsession would be the next best method in line. Align persistence timeout to whatever SF is set to use (default 20min).
k
Kari Ruissalo (WyW)
11/24/2023, 7:13 AM@CTXMike in StoreFront the setting is the session timeout?
j
jvitech
11/24/2023, 11:52 AMThanks guys! My understanding was SSL session was for SSL bridge but I'm glad I was wrong!! Yes I'll align with the Storefront session timeout (20 min default). I'll try this 🙏
jvitech
11/24/2023, 12:14 PMSSL session is not working :/ This browser thin client is behaving weirdly. I don't want to change everything because of this bug ... like using CWA directly as it was causing also issues in the past.
Use DESTIP works but basically all traffic goes to one SF so LB but at least it is resilient ...
k
Kari Ruissalo (WyW)
11/24/2023, 1:39 PMwhat about having the lb with just one sf server in it and using the "protection" having the other server via backup server
Kari Ruissalo (WyW)
11/24/2023, 1:40 PMif the "primary" fails and the probes stop responding correctly the user sessions would be routed to the "secondary"
j
jvitech
11/24/2023, 2:22 PMThat's what does DESTIP for me automatically :) there is no LB but it is resilient (automatic failover). It may be ok if one SF can take the logon storm.
k
Kari Ruissalo (WyW)
11/24/2023, 3:09 PMoh yeah, correct
👍 1