Citrix SD-WAN WANOP

SSL compression

March 12, 2021

Contributed by:

S C

Citrix SD-WAN WANOP SSL compression applies multisession compression to SSL connections (for example, HTTPS traffic), providing compression ratios of up to 10,000:1.

Note

SSL compression requires a secure peering (signaling) connection between the two appliances at the ends of the accelerated link.

Encryption is maintained from end to end by splitting the connection into three encrypted segments: client to client-side appliance, client-side appliance to server-side appliance, and server-side appliance to server.

localized image

Caution: SSL Compression decrypts the encrypted data stream and, unless the User Data Encryption option is used, the compression histories of both acceleration units retain clear-text records of the decrypted data. Verify that your deployment and settings are consistent with your organization’s security policies. Citrix recommends that you enable encryption of the compression history on each unit when you configure the secure peering signaling connection required for SSL acceleration.

Note

When you enable SSL compression, the appliance stops attempting compression with other appliances with which it does not have a secure peer relationship (whether Citrix SD-WAN WANOP, or Citrix SD-WAN WANOP Plug-in). This feature is thus best-suited for networks where all appliances are configured for SSL compression.

With SSL compression enabled, you must manually type in the Key Store password each time the appliance is restarted.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

SSL compression

March 12, 2021

Contributed by:

S C

March 12, 2021

Contributed by:

S C

SSL compression

In this article