Forum Discussion
Portal Access to HTTPS resources slow
Hey all,
Wanted to reach out to see if anyone has dealt with Portal Access and performance issues for resources in the backend that use HTTPS. I'm on version 15.x, recently upgraded to v15.1.10.3, ...
zamroni777
MVP
MVPplease ensure that oneconnect profile is enabled on the http profile assigned to the vs, so that bigip can use 1 server side tcp connection for multiple client sessions.
as 1 tcp session equals to 1 tls/ssl session, hence reducing number of server side tcp session will also reduce the number of server side tls session.
you might also need to reduce tls cipher set strength of the server "side" ssl profile to reduce server processing load, e.g:
- only use aes 128 bit and disable aes aes 256 or higher
- disable ecdhe / dhe , hence it will only use rsa/dsa
additionally, ensure that server uses hardware accelerated aes (intel/amd aes-ni).
