session-cache

Function

The session-cache command configures the session cache parameters of an SSL uninstallation profile.

Format

session-cache { number cache-number | timeout cache-time }

Parameters

Parameter	Description	Value
number cache-number	Specifies the number of cached sessions of an SSL uninstallation profile. The more sessions are cached, the more FW resources are consumed, but the less SSL handshakes take place.	The value is an integer ranging from 100 to 5000. The default value is 2000.
timeout cache-time	Specifies the aging time of cached sessions of an SSL uninstallation profile. The longer the aging time of cached sessions is, the longer the cached sessions are retained, and the more FW resources are consumed.	The value is an integer ranging from 10 to 86400, in seconds. The default value is 1800 seconds.

Views

SSL uninstallation profile view

Default Level

2: Configuration level

Usage Guidelines

The configuration of the session cache parameters of an SSL uninstallation profile can reduce the overhead caused by SSL handshakes. However, a large value for this parameter may result in a waste of FW session resources and degraded performance.

Example

# Set the number of cached sessions of SSL uninstallation profile abc to 500, and set the session aging time to 300 seconds.

<sysname> system-view
[sysname] slb
[sysname-slb] ssl-profile abc
[sysname-slb-ssl-profile-0] session-cache number 500
[sysname-slb-ssl-profile-0] session-cache timeout 300