SSL offloading or not?

0

Hello, Iam building an office webapps farm for MS Lync which will be load balanced by a Kemp VLM2000. Since this is a VM running on a Hyper-V host, I find it hard to imagine that SSL offloading would be really benificial. The processing power is eventually done by the hyper-v hosts and not by an ASIC. Is there any other reason I would do this? The farm consists of 2 servers which are load balanced by the KEMP.

2 comments

Avatar
Barry Gleeson Official comment

It can be useful to do SSL offloading (even where traffic is again reencrypted) if you wanted to do any content matching. For example if you wanted to use the same VIP for both Reverse Proxy and Office Web Apps, SSL offloading would allow you to then Content Switch to the appropriate Real Servers depending on the traffic type. Without SSL offloading this would not be possible and separate VIPs would be needed.

Apart from this, if taking load off the server was a requirement you could do SSL offloading without re-encrypt and thus save processing power on the Real Server but in this environment as you say there may not be so much benefit .

Avatar
0
niels.broertjes

Thanks a lot for the usefull anwser. That confirms and clears up things for me!