Forum Discussion

Climber's avatar
Climber
Icon for Nimbostratus rankNimbostratus
Jul 24, 2019

Affectation of SSL cipher suites on performances

Hi everybody,

 

we've go a BigIP 5250 working as Load Balancer on production. The resources (CPU/RAM) on this device are very busy.

 

The problem we have is we have configured almost all the virtual server listening on HTTP, without SSL encryption.

 

We are planning to activate HTTPs (SSL) on some critical virtual server, but we are worry about the perfomance affectation of this over the device. It would be a disaster to lose the production service...

 

My question is, is there difference between configurate a secure cipher suite or a simplier one (like RC4 or similar)? In this way, Does it exist some kind of table where i can read the afectation of each cipher suite available to choose on the big ip?

 

Thanks you very much!

Climber.

  • Korai's avatar
    Korai
    Icon for Nimbostratus rankNimbostratus
    Jul 24, 2019

    RC4 is not a secure Cipher suit , we have removed it long time back.

     

    Yes You can see on SSL profile and can modify SSL cipher suites , normally it use default ones including RC4 and Others, You can modify it but make sure none of your server using these suites .

  • Climber's avatar
    Climber
    Icon for Nimbostratus rankNimbostratus
    Jul 24, 2019

    Right, I know RC4 is not secure anymore. But I need to priorize performances on the decive and pass que cipher requeriments.

     

    It's for that that I am wondering if weaker cipher suites require less CPU/RAM than stronger one.

     

    And that's why I'm looking for the table where I got the cost of each cipher suite.

     

    Thanks you for your answer.

    Climber.