Forum Discussion

rosarra's avatar
Icon for Altocumulus rankAltocumulus
Jun 13, 2022

Random Handshake failed


I know this problem has already been addressed in other posts but I don't find a solution to my problem. In a configuration with a VS running ssl decryption everything works correctly but sometimes in random mode and with increasing frequency depending on the amount of traffic I see failed handshakes coming in. The source addresses are part of an AWS CDN and randomly return this type of error while normally they seem to work correctly. I therefore exclude a certificate problem because otherwise it would not work at all. Any ideas where I can look for the cause?

tmm3[11083]: 01260013:6: SSL Handshake failed for TCP ->

3 Replies

  • I guess this problem relate to cipher suite 

    some device tried to ssl handshake with not cipher supported by F5 

    • rosarra's avatar
      Icon for Altocumulus rankAltocumulus

      Unfortunately, I think it is more complicated. I did a ssldump of the correct and failed connections.
      It seems that at some point the connection is reset by the source and this is interpreted by F5 as Handshake failed. Probably because it happens during the certificate exchange phase. Is this possible?

      See the ssldump here attached.


  • you can see "cipherSuite Unknown value 0x9d" 

    could you change cipher list to "all" in ssl profile (client and server )?