Forum Discussion
LanceLyons
Cirrus
CirrusSSL Full Proxy - SSL Re-Encryption performance degradation
Hi, We have traditionally been a shop that used SSL encryption to the F5 and decrypted text to webservers (https to F5 and http to webservers). We are being asked to encrypt the full route. We a...
Hello LanceLyons , Kai_Wilke provided a full list what can cause you such issues and if this helped please mark his reply as a solution. Outside of that if you are using a hardware device maybe see if hardware ssl ciphers are used for better performance as mentioned in https://support.f5.com/csp/article/K75983426 / https://support.f5.com/csp/article/K50459385 / https://support.f5.com/csp/article/K13213 and the /var/log/ltm if you are hitting some license limit for example.
LanceLyonsCirrus
CirrusThanks Mohamed,
Have you all noticed any performance degradation to heavily used websites from an end user perspective with the decryption at f5 and reencrypt at f5?
LanceLyons ,
No , I performs ssl bridging for high traffic virtual servers , these virtual servers serves public services over internet for ISPs and there is no issues regarding it server-ssl or re-encrypting traffic towards web-servers.
> I always offer them not to do this to lighweight the headache on webservers.
> to be sure , cofigure it and monitor your CPU periodically.
Regards