H3C Technologies H3C SecBlade LB Cards - Manual (Page 216)

205
Configuring session acceleration
Overview
In some specific applications, session acceleration helps improve system performance for setting up
sessions. If the outbound interface of the session initiator is not the same as the inbound interface of the
session responder, and the service configurations on the two interfaces are not the same, session
acceleration is not available.
Session acceleration can be configured only in the Web interface.
Configuring session acceleration
1. Select Security > Session Table > Advanced from the navigation tree.
2. Click the Session Acceleration tab.
Figure 96 Session acceleration configuration page
3. Click the Enable session acceleration box.
4. Click Apply.
Configuration guidelines
When you configure session acceleration, follow these guidelines:
• When session acceleration and active/standby failover are configured at the same time, session
acceleration does not take effect, but will degrade the system performance.
• If session acceleration is enabled, the system cannot perform abnormity detection for non-SYN
initial TCP packets.
• If session acceleration is enabled, the statistics of half-open and half-close sessions are not correct,
and SYN Flood attack detection cannot be performed according to half-open and half-close session
threshold.
• If session acceleration is enabled, the statistics of protected IP addresses by a bidirectional TCP
proxy are not correct.
• If session acceleration is enabled and you want to limit the number of connections, use the CLI to
configure the limit.