Forum Discussion
Amit585731
Nimbostratus
NimbostratusIntermittent disconnect
Hi,
recently we migrated from v10.2.4 to v12.1.2 and since then we are seeing most of applications are facing issue. The major change I know is related to ciphers hence I have selected serverside ciphers as "serverssl-insecure-compatible" but still we are seeing intermittent disconnect. Is there any another way we can find the reason for disconnect.
Also one thing I noticed that at server "TLSv1.2 112 bits ECDHE-RSA-DES-CBC3-SHA Curve B-571 DHE 570" is configured while if I check on F5 same cipher ECDHE-RSA-DES-CBC3-SHA is showing but with 168 bits. Please suggest.
Only1masterbla1Cirrus
-
Use curl -vk command on F5 for backend server ssl connectivity check.
-
Check ciphers supported on F5 Vs Server ciphers as per list below. Use Hex value for comparison instead of cipher suite name.
K13163: SSL ciphers supported on BIG-IP platforms (11.x - 13.x) https://support.f5.com/csp/article/K13163
K13156: SSL ciphers used in the default SSL profiles (11.x - 13.x) https://support.f5.com/csp/article/K13156
-
JGCumulonimbus
Another possible reason for that is that the back-end application servers are not configured consistently.