Forum Discussion

cjunior_138458's avatar
cjunior_138458
Icon for Altostratus rankAltostratus
Aug 13, 2018

Some SSLO issues and low performance

Hi,

 

We are facing issue regarding on performance and fails to navigation when trying SSLO. We have a simple virtual environment setup, where our SSLO has only one firewall as inline service, and an datagroup to bypass few ssl traffics. We are using SSLO as ingress and egress at same box in L3, and all traffic (tcp, udp, any) are send and get back thru that inline service. Before we had error with "http_process_state_prepend" that are solved with last version "13.1.0-3.0.260.6.265".

 

But, we still failing to navigation on many sites and functionalities, because for some reason, requests are failing on browsers, so we can see connections reseting. On SSLO this issue are silent to the logs, so for now we don't have idea what we need to do on it.

 

Meanwhile, this SSLO is killing download and upload performance, so we could check this by sending traffic direct to the firewall and still using LTM as a internet gateway.

 

Any ideia about this issue?

 

application delivery
LTM
security
sslo
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Aug 19, 2018

    It's a little difficult to troubleshoot based on your description.

     

    You're using the latest 3.0 version of SSLO (13.1.0-3.0.260.6.265) with a single firewall as an inline layer 3 service. Correct?

     

    And SSLO is acting as a transparent proxy service. Correct?

     

    Does the inline firewall do any NAT'ing?

     

    You said, "We are using SSLO as ingress and egress at same box in L3", but to be clear, you're only using SSLO for outbound traffic. Correct?

     

    Can you determine how traffic is failing? Are you sure it's on the client side?

     

    And can you describe in detail how you have SSLO configured?