Forum Discussion
John_Heyer_1508
Cirrostratus
CirrostratusCPU Increase when enabling AES-GCM
Supposedly AES-GCM should be the "best" cipher right now in terms of efficiency, however I noticed when enabling it on the F5, CPU goes up significantly. This is on a Viprion 2100 blade, 11.5.1 HF6....
Are you still using the NATIVE SSL stack or did you change to COMPAT in the SSL profile? https://support.f5.com/kb/en-us/solutions/public/13000/200/sol13213.html
I think this confirms that:
https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html
Looking at that solution, it has a command to run and verify that AES-GCM is in your NATIVE, but in 11.6 it is. If you do a "show ltm profile client-ssl can you tell which ciphers are mostly being used now that may be more efficient?