Forum Discussion
mnb_63148
Nimbostratus
NimbostratusSSL errors during load test
We are currently load testing an application and receive SSL errors when reaching a certain number of users. We have tested using two different scripts, at one script, the SSL errors occur at 900 use...
If the RST logging doesn't prove helpful, here's some good info on SSL debug logging:
Enabling SSL debug logging
https://support.f5.com/kb/en-us/solutions/public/15000/200/sol15292.html?sr=39449817
Kevin
mnb_63148Nimbostratus
NimbostratusThanks, Kevin. I apologize for the vagueness. I was not initially involved in the beginning of the troubleshooting and did not have a packet capture at the time.
I now have a capture.
C-> S SSLv2 Client Hello
C<- S SSLv3 Server Hello
C<- S SSLv3 Continuation Data
C<-S SSLv3 Continuation Data, Continuation Data
C->S Client Key Exchange
C<-S Change Cipher Spec, Encrypted Handshake Message
C->S Application Data
C<-S Continuation Data
C->S Encrypted Alert
C->S RST, ACK
It looks like the client-side/load-tester side is initiating the Reset. Also, the record layer at the beginning is SSLv2 and the Handshake Message is SSLv3. We are on 11.3 HF8 and it does not support SSLv2 in its default cipher suite. However, the client-side still sent Application Data/A GET Request to F5.
