Session resumption (caching)

Hi Nick,

See if this article helps you...

https://support.f5.com/kb/en-us/solutions/public/6000/700/sol6767.html

Regards,

Seth

The f5 does perform SSL session resumption when using client-ssl profiles (http://support.f5.com/kb/en-us/solutions/public/6000/700/sol6767.html). Can you share the config for the SSL virtual server that is configured for the site?

The f5 does perform SSL session resumption when using client-ssl profiles (http://support.f5.com/kb/en-us/solutions/public/6000/700/sol6767.html). Can you share the config for the SSL virtual server that is configured for the site?

I have the same issue: clientssl profile has SSL caching 20K, timeout 3600 (on an 11.4 system).

SSL Labs says: Session resumption (caching): No (IDs assigned but not accepted)

???

I have the same issue. There is a SOL that recommends to use 1 clientssl per VIP. This solved the issue temporarily for about 30 minutes. Then I ran SSLLABS again and the issue was back. Its something with caching I think. Caching is set to default, I changed it but this has no effect. (On 11.6.1)

Any tips, ideas are more than welcome!

The cipher is not the cause. I use this cipher on many sites and everywhere else session resumption is working.

I have the same issue. K6767 says:

When more than one SSL profile is configured without mutually exclusive session cache limits, contention in the shared global cache may cause entries for one virtual server to be evicted in favor of another even if fewer than the maximum configured for that profile are cached. To avoid this possibility, consider limiting the total combined configured session size for all SSL profiles to the value of the global session cache size. For example, if you have four SSL profiles in use on a single TMM BIG-IP running 10.1.0 or later, you may want to consider configuring the session Cache Size setting for each profile to 65,536 (25 percent of the global cache size of 262,144).

I have two active

clientssl

tmsh list ltm profile client-ssl PROFILE_NAME cache-size

ltm profile client-ssl profile1_clientssl {
   cache-size 262016
}
ltm profile client-ssl profile2_clientssl {
   cache-size 128
}

So, the total is 262144. But I still get:

Session resumption (caching):No (IDs assigned but not accepted)