SSL Statistics Test

Administrators create SSL Virtual Hosts (also referred as SSL engine) on the target delivery controller using SSL setup. The SSL Virtual Hosts hold SSL - related information and handle traffic with the associated certificate and private key. The SSL Virtual Host can be associated with multiple SLB Virtual Services and different application types on top of SSL support, such as HTTPS, FTPS or TCPS. Tracking the connections made through the SSL Virtual Host, administrators are able to figure out the load on the target delivery controller. This could be done using the SSL Statistics test.

For each virtual host on the target delivery controller, this test reports the number of SSL connections that were open on the virtual host and the count of SSL connections that were requested and accepted by the virtual host. In the process, this test also reveals the number of sessions that were resumed and ready to be resumed.

Target of the test : An Array Application Delivery Controller

Agent deploying the test : A remote agent

Outputs of the test : One set of results for each virtual host on the target delivery controller that is to be monitored.

Configurable parameters for the test
Parameter Description

Test Period

How often should the test be executed.

Host

The IP address of the host that is being monitored.

SSH Username and
SSH Password

Specify the credentials of a user who has the right to execute CLI (command-line interface) commands on the target delivery controller and pull out metrics via SSH.

Confirm Password

Confirm the SSH Password by retyping it here.

SSH Port

Specify the SSH port of the target delivery controller here; The default value is 22.

SSH Enable Password

The delivery controller offers three levels or modes using which the user can simply execute CLI commands on the ArrayOS. These modes are given below:

  • User Mode - In this mode, the user can execute the commands to perform the authorized and basic operations and non-critical functions on the ArrayOS.
  • Enable Mode - This mode lets the user to run the majority of commands on the ArrayOS. Since the user has access to the majority of commands, it becomes necessary that the mode be password protected. This is to prevent unauthorized access to this mode, access should be password protected.
  • Config Mode - Using this mode, the user can change the configuration of the delivery controller for global configuration and access (Using commands).

The user can select any of these modes depending on his/her needs. If the user has selected the Enable Mode, he/she should specify a password in the SSH Enable Password text box to execute the commands.

In order to have access to most of the commands on the ArrayOS, administrator should select the Enable mode. Normally, you should enter a password to enter the Enable mode to restrict access to this mode. enable secret password uses stronger encryption when it is stored in the configuration file and it is more safe.

Confirm Password

Confirm the SSH Enable Password by retyping it here.

Timeout

Specify the duration (in seconds) within which the SNMP query executed by this test should time out in this text box. The default is 10 seconds.

Measurements made by the test
Measurement Description Measurement Unit Interpretation

Open SSL connections

Indicates the number of SSL connections that were open between on this virtual host during the last measurement period.

Number

 

Accepted SSL connections

Indicates the number of SSL connections that were accepted by this virtual host during the last measurement period.

Number

 

Requested SSL connections

Indicates the number of SSL connections that were requested from this virtual host during the last measurement period.

Number

 

5 minutes requested rate

Indicates the rate at which SSL connections were requested from this virtual host in last 5 minutes.

Connections/Sec

 

Resume SSL sessions

Indicates the number of SSL sessions that were resumed on this virtual host during the last measurement period.

Number

 

Resumable SSL sessions

Indicates the number of SSL sessions that were ready to be resumed on this virtual host during the last measurement period.

Number

 

Session misses

Indicates the number of SSL sessions that were missed on this virtual host during the last measurement period.

Number