The CSS-100 provides extensive logging features, which can track top Web page hits, as well as load-balancing information. I used these stats to verify the proper function of the CSS-100 and to observe the number of HTTP GETs my client performed for each Web page.

The CSS-100 protects your Web servers against denial-of-service attacks. Each incoming TCP session is first handled by the switch, verifying that the session is indeed a proper HTTP request. If it is not, you can configure the switch to discard the packet. By negotiating each session in this manner, you can safeguard the fragile TCP stack on your Web server from troublemakers.

When load-balancing SSL (Secure Sockets Layer) connections, the CSS-100 makes sticky connections based on the host IP address. When an SSL connection is detected from a host (as in an e-commerce transaction), all packets from that IP address will go to the same server. Sessions may also be tracked based on cookies from the client.

You can manage the CSS-100 in-band via serial, out-of-band via Fast Ethernet or serial, or via a built-in Java configuration program, called FlowMinder.

Send your comments on this article to Joel Conover at jconover@nwc.com.