Why am I seeing TCP_ACCELERATED in my access logs as the s-action field?

book

Article ID: 167746

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

Example of an access-log entry :

2009-12-28 21:08:37 363 10.10.10.1 200 TCP_ACCELERATED 39 594 CONNECT tcp www.somesecuresite.com 443 / OBSERVED "BlackList;Email"

Resolution

TCP_ACCELERATED is logged whenever a TCP tunnel or HTTP CONNECT tunnel connection which has protocol detection enabled and a protocol is detected which involves handing the connection off to the appropriate workers which can perform additional acceleration.  If the handoff succeeds, TCP_ACCELERATED is logged in the log record of the original tunnel transaction.