For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

funkdaddy_31014's avatar
funkdaddy_31014
Icon for Nimbostratus rankNimbostratus
Oct 23, 2013

Cookie Encryption and CPU

Not getting much love on this issue... If anyone out there is using cookie encryption in v11 (and not having CPU issues), could you run the below command and post your output? Do you have a large k...
application delivery
management
performance
TMSH
funkdaddy_31014's avatar
funkdaddy_31014
Icon for Nimbostratus rankNimbostratus
Oct 28, 2013

So...to answer my own question: We upgraded our LTM to 11.3.0 HF8 as suggested by the SOL, and now our output shows the below output. After running for 6 hours, there have been 0 keys evicted (was constantly increasing) and an ever-increasing keys_used value - so it does appear that have a keys_reused value of 0 was indicative of the issue specified in SOL 14329, and that value should be always going up in a healthy environment using cookie encryption.

 tmctl -w 200 tmm_aes_stat
keys keys_cached keys_evicted keys_found keys_reused keys_derived encrypts 
---- ----------- ------------ ---------- ----------- ------------ -------- 
  52          52            0        928      417013           36  1267454