For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bbensten_8485's avatar
bbensten_8485
Icon for Nimbostratus rankNimbostratus
May 08, 2014

Large files through HTTPS offload

We have a VIP that is doing SSl offload for a service that does not have a large number of connections but each connection passes a large amount of traffic through the session. The average file pushed over this HTTPS connection is 40-70gb. Does anyone have any recommendations for optimizing these types of connections through this VIP? Is there a specific profile we should think about using or any other tuning? We have seen cases where the session seems to get disconnected for files larger then 20gb but seems to work fine for anything smaller then that. The F5s are 8900 series and have plenty of horsepower.

 

application delivery
availability
deployment
LTM

1 Reply

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    May 08, 2014

    The TCP Profile defaults are mostly OK but for SSL traffic always ensure Nagle's Algorithm is disabled (this is the default) and also Delayed ACKs (enabled by default) as both can cause stalls.

     

    These are far less important but may help things get to full speed in less time;

     

    • Disable Slow Start
    • Change the Initial Congestion Window Size to 10
    • Change the Initial Receive Window Size to 10

    If the client side network is reliable, perhaps also change the Congestion Control Algorithm to High Speed.