For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DanSheldon_2824's avatar
DanSheldon_2824
Icon for Nimbostratus rankNimbostratus
Sep 10, 2016

ASM impact on ltm

I am designing an F5 LTM LB/WAF solution for a new customer and need to know what impact adding ASM functionality has on the LTM/Big IP device to make sure I'm right-sizing the proposed solution for ...
application delivery
ASM Advanced WAF
LTM
security
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Sep 12, 2016

With the newer SSL cipher suites, you are better off using the 2000s platform which can handle the newer ciphers better than the older platform like 1600. As a rule of thumb, based on experience, I would recommend planning for a 20-30% hit in resource utilization for the same amount of traffic in order to add a new ASM module to the existing LTM module. However, this is quite a generic recommendation and could vary depending on traffic characteristics.