For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bbensten_8485's avatar
bbensten_8485
Icon for Nimbostratus rankNimbostratus
May 08, 2014

Large files through HTTPS offload

We have a VIP that is doing SSl offload for a service that does not have a large number of connections but each connection passes a large amount of traffic through the session. The average file push...
application delivery
availability
deployment
LTM
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
May 08, 2014

The TCP Profile defaults are mostly OK but for SSL traffic always ensure Nagle's Algorithm is disabled (this is the default) and also Delayed ACKs (enabled by default) as both can cause stalls.

 

These are far less important but may help things get to full speed in less time;

 

  • Disable Slow Start
  • Change the Initial Congestion Window Size to 10
  • Change the Initial Receive Window Size to 10

If the client side network is reliable, perhaps also change the Congestion Control Algorithm to High Speed.