Currently I'm working on Riverbed steelhead.
My question is all our Riverbed in production is working with default inpath rules in place,I found the port labels include 443,this means my device not optimising SSL connection?,kindly explain
By default, Riverbed Steelhead will not try to optimize three types of traffic:
This is achieved by means of the default in-path rules, which set to passthrough the default ports for such protocols.
This section of the Steelhead Management Console User´s Guide describes the default in-path rules and lists all ports set to passthrough by default
In my opinion it makes sense that default in-path rules are set to avoid optimization of encrypted traffic:
If you need to perform SSL optimization, you will need to apply specific configurations. The chapter SSL deployment in the Steelhead Deployment Guide could be useful for you:
The Riverbed SSL solution optimizes data transfers that are encrypted using SSL, provided that SteelHeads are deployed locally to both the client-side and server-side of the network. All of the same optimized connections that are applied to normal nonencrypted TCP traffic, you can also apply to encrypted SSL traffic. SteelHeads accomplish this without compromising end-to-end security and the established trust model.
According to the list of required components for SSL optimization, apart from certificates, you may need additional licenses:
SSL Optimization Required Components
You need the following SSL components to deploy SSL on SteelHeads:
- Enhanced Cryptography License Key
- Proxy Certificate and Private Key
- Certificate Chain Discovery
- Certificate Authority Certificates
- Peer Certificates